Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j9ch-j53g-49hj

Опубликовано: 10 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.

Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.

EPSS

Процентиль: 95%
0.17446
Средний

8.8 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 8.8
nvd
около 2 лет назад

Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make(), which could allow authenticated remote attackers to execute arbitrary code.

EPSS

Процентиль: 95%
0.17446
Средний

8.8 High

CVSS3

Дефекты

CWE-918