Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7rj-r49c-jw49

Опубликовано: 24 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

EPSS

Процентиль: 19%
0.00062
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 9.1
nvd
больше 2 лет назад

Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

EPSS

Процентиль: 19%
0.00062
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-352