Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m596-5xhq-4mfp

Опубликовано: 01 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code.

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code.

EPSS

Процентиль: 76%
0.00917
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.1
nvd
около 4 лет назад

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code.

EPSS

Процентиль: 76%
0.00917
Низкий

Дефекты

CWE-20