Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qj9h-vqcc-rfjq

Опубликовано: 25 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.

EPSS

Процентиль: 90%
0.05426
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-94

Связанные уязвимости

CVSS3: 7.2
nvd
около 3 лет назад

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code.

EPSS

Процентиль: 90%
0.05426
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-94