Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p45m-r94f-7mf2

Опубликовано: 10 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP requests to trigger this vulnerability.

A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP requests to trigger this vulnerability.

EPSS

Процентиль: 71%
0.00691
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 4.3
nvd
около 2 лет назад

A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution when chained with an LFI vulnerability. An attacker can send a series of HTTP requests to trigger this vulnerability.

EPSS

Процентиль: 71%
0.00691
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-434