Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pwgf-2vfp-fh6c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

EPSS

Процентиль: 74%
0.00811
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-285
CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
около 4 лет назад

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.

EPSS

Процентиль: 74%
0.00811
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-285
CWE-287