Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjw6-8qwv-m8mg

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

EPSS

Процентиль: 12%
0.00039
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 6.8
nvd
больше 2 лет назад

OMICARD EDM backend system’s file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

CVSS3: 6.8
fstec
больше 2 лет назад

Уязвимость функции загрузки файлов программного обеспечения OMICARD EDM ITPison, позволяющая нарушителю загружать произвольные файлы

EPSS

Процентиль: 12%
0.00039
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-434