Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jffq-5gqv-qfcx

Опубликовано: 25 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

** UNSUPPPORTED WHEN ASSIGNED ** GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.

** UNSUPPPORTED WHEN ASSIGNED ** GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.

EPSS

Процентиль: 42%
0.00199
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 2 лет назад

GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.

CVSS3: 9.8
nvd
больше 2 лет назад

GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.

CVSS3: 9.8
debian
больше 2 лет назад

GBrowse accepts files with any formats uploaded and places them in the ...

CVSS3: 5.3
fstec
больше 2 лет назад

Уязвимость браузера JBrowse, связанная с неограниченной загрузкой файлов опасного типа, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 42%
0.00199
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434