Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pv3p-47qr-3pw4

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.

EPSS

Процентиль: 72%
0.00702
Низкий

3.7 Low

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 3.7
nvd
почти 21 год назад

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.

EPSS

Процентиль: 72%
0.00702
Низкий

3.7 Low

CVSS3

Дефекты

CWE-434