Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pjv5-66g3-7gqx

Опубликовано: 12 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/M_Icons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell injection.

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/M_Icons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell injection.

EPSS

Процентиль: 71%
0.00684
Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
nvd
почти 2 года назад

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to send a POST request to the endpoint '/opengnsys/images/M_Icons.php' modifying the file extension, due to lack of file extension verification, resulting in a webshell injection.

EPSS

Процентиль: 71%
0.00684
Низкий

8.8 High

CVSS3

Дефекты

CWE-434