Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qhww-qrj4-8v34

Опубликовано: 19 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.5
CVSS3: 8.4

Описание

OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.

OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.

EPSS

Процентиль: 3%
0.00015
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 8.4
nvd
около 2 месяцев назад

OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privileges to system level. Attackers can place a malicious executable in the unquoted service path and trigger the service restart to execute code with elevated system privileges.

EPSS

Процентиль: 3%
0.00015
Низкий

8.5 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-428