Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p2qq-m885-cm42

Опубликовано: 01 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 7.3

Описание

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 3.9.0 mitigates this issue. Patch name: 406022e79f4a18b3070a446712080571eff11e30. You should upgrade the affected component.

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 3.9.0 mitigates this issue. Patch name: 406022e79f4a18b3070a446712080571eff11e30. You should upgrade the affected component.

EPSS

Процентиль: 31%
0.00381
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 7.3
nvd
3 месяца назад

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 3.9.0 mitigates this issue. Patch name: 406022e79f4a18b3070a446712080571eff11e30. You should upgrade the affected component.

EPSS

Процентиль: 31%
0.00381
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-266