Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mh5c-7q6j-cwmg

Опубликовано: 29 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1.

Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1.

EPSS

Процентиль: 94%
0.12974
Средний

8.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
nvd
около 3 лет назад

Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1.

EPSS

Процентиль: 94%
0.12974
Средний

8.8 High

CVSS3

Дефекты

CWE-22