Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pjx5-jjh7-w9hw

Опубликовано: 03 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files under arbitrary file path and allows the attacker to perform arbitrary system operation and disrupt of service.

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files under arbitrary file path and allows the attacker to perform arbitrary system operation and disrupt of service.

EPSS

Процентиль: 86%
0.02789
Низкий

8.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
nvd
около 3 лет назад

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files under arbitrary file path and allows the attacker to perform arbitrary system operation and disrupt of service.

EPSS

Процентиль: 86%
0.02789
Низкий

8.8 High

CVSS3

Дефекты

CWE-22