Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pwgq-6599-qfpv

Опубликовано: 20 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.This issue affects Rental Module: before 23.05.15.

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.This issue affects Rental Module: before 23.05.15.

EPSS

Процентиль: 50%
0.0027
Низкий

10 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Command Injection, Using Malicious Files, Upload a Web Shell to a Web Server.This issue affects Rental Module: before 23.05.15.

EPSS

Процентиль: 50%
0.0027
Низкий

10 Critical

CVSS3

Дефекты

CWE-434