Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jv66-87h9-r6q4

Опубликовано: 31 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 8.4

Описание

Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorized code execution during application startup or system reboot.

Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorized code execution during application startup or system reboot.

EPSS

Процентиль: 2%
0.00014
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 месяца назад

Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorized code execution during application startup or system reboot.

EPSS

Процентиль: 2%
0.00014
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428