Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m8xg-hgh7-rwh3

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

EPSS

Процентиль: 36%
0.00151
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 4.9
nvd
почти 2 года назад

A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

EPSS

Процентиль: 36%
0.00151
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-73