Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pr3p-m4hm-wqv2

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.

EPSS

Процентиль: 18%
0.00059
Низкий

7.1 High

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 7.1
nvd
больше 2 лет назад

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP connection. Attackers could impersonate a device and supply malicious information about the device’s web server interface. By supplying malicious parameters, an attacker could redirect the user to arbitrary and dangerous locations on the web.

EPSS

Процентиль: 18%
0.00059
Низкий

7.1 High

CVSS3

Дефекты

CWE-601