Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qj3w-6895-r5mf

Опубликовано: 18 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

EPSS

Процентиль: 90%
0.0516
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-23

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.

EPSS

Процентиль: 90%
0.0516
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-23