Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q2rc-2qhm-p3pw

Опубликовано: 31 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.

EPSS

Процентиль: 47%
0.00239
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 6.5
nvd
больше 3 лет назад

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.

EPSS

Процентиль: 47%
0.00239
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22