Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7hm-v888-gvg3

Опубликовано: 11 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.

EPSS

Процентиль: 53%
0.00302
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.4
nvd
почти 4 года назад

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.

EPSS

Процентиль: 53%
0.00302
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22