Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pq4p-r5xh-r7fm

Опубликовано: 03 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can result in a disclosure of arbitrary files. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can result in a disclosure of arbitrary files. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

EPSS

Процентиль: 88%
0.03929
Низкий

7.5 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.5
nvd
больше 1 года назад

A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

EPSS

Процентиль: 88%
0.03929
Низкий

7.5 High

CVSS3

Дефекты

CWE-22