Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qw8c-vmfp-c4cj

Опубликовано: 01 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' feature) and RevoWorks Browser prior to 2.2.95 (when using 'VirusChecker' or 'ThreatChecker' feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' feature) and RevoWorks Browser prior to 2.2.95 (when using 'VirusChecker' or 'ThreatChecker' feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.

EPSS

Процентиль: 27%
0.00094
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-693

Связанные уязвимости

CVSS3: 9.1
nvd
почти 2 года назад

Protection mechanism failure issue exists in RevoWorks SCVX prior to scvimage4.10.21_1013 (when using 'VirusChecker' or 'ThreatChecker' feature) and RevoWorks Browser prior to 2.2.95 (when using 'VirusChecker' or 'ThreatChecker' feature). If data containing malware is saved in a specific file format (eml, dmg, vhd, iso, msi), malware may be taken outside the sandboxed environment.

EPSS

Процентиль: 27%
0.00094
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-693