Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8v2-m2f3-8jgf

Опубликовано: 15 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

EPSS

Процентиль: 66%
0.00504
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 лет назад

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

EPSS

Процентиль: 66%
0.00504
Низкий

8.8 High

CVSS3

Дефекты

CWE-434