Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m7p8-hcw4-p377

Опубликовано: 05 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A CWE-862 “Missing Authorization” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

A CWE-862 “Missing Authorization” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 43%
0.00206
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-425
CWE-862

Связанные уязвимости

CVSS3: 5.3
nvd
почти 2 года назад

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

EPSS

Процентиль: 43%
0.00206
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-425
CWE-862