Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pgpm-vjm2-c33c

Опубликовано: 02 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.

An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.

EPSS

Процентиль: 94%
0.14201
Средний

7.5 High

CVSS3

Дефекты

CWE-494

Связанные уязвимости

CVSS3: 7.5
nvd
больше 3 лет назад

An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.

EPSS

Процентиль: 94%
0.14201
Средний

7.5 High

CVSS3

Дефекты

CWE-494