Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r6q8-9x29-mrj4

Опубликовано: 10 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.

EPSS

Процентиль: 11%
0.00039
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 6.8
nvd
около 1 месяца назад

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type of file uploaded to Explore Content. Attackers can make use of this weakness and upload malicious executable files into the system, and it can be sent to victim for performing further attacks.

CVSS3: 6.8
fstec
около 1 месяца назад

Уязвимость программного обеспечения для получения доступа к инструментам аналитики и планирования IBM Analytics Content Hub, связанная с неограниченной загрузкой файлов опасного типа, позволяющая нарушителю загружать произвольные файлы

EPSS

Процентиль: 11%
0.00039
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-434