Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mxph-pm8g-2q9m

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The freshtomato-arm has a vulnerable URL-decoding feature that can lead to memory corruption.

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The freshtomato-arm has a vulnerable URL-decoding feature that can lead to memory corruption.

EPSS

Процентиль: 88%
0.03958
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-arm` has a vulnerable URL-decoding feature that can lead to memory corruption.

EPSS

Процентиль: 88%
0.03958
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-787