exploitDog

GHSA-q4h7-9j45-w69m

Опубликовано: 04 авг. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

Ссылки

EPSS

Процентиль: 35%

0.00142

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-434

Связанные уязвимости

CVE-2025-52239

CVSS3: 9.8

nvd

6 месяцев назад

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

EPSS

Процентиль: 35%

0.00142

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-434