Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mvh8-j583-3mwc

Опубликовано: 08 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord. Affected is the function InstallSnap of the component Update Handler. The manipulation leads to command injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222600.

A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord. Affected is the function InstallSnap of the component Update Handler. The manipulation leads to command injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222600.

EPSS

Процентиль: 48%
0.00253
Низкий

7.8 High

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 7.8
nvd
почти 3 года назад

A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. Affected is the function InstallSnap of the component Update Handler. The manipulation leads to command injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222600.

EPSS

Процентиль: 48%
0.00253
Низкий

7.8 High

CVSS3

Дефекты

CWE-77
CWE-78