Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v5xg-69cv-gvwx

Опубликовано: 23 сент. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 4.9

Описание

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administrator privileges to exploit Relative Path Traversal to download arbitrary system files.

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administrator privileges to exploit Relative Path Traversal to download arbitrary system files.

EPSS

Процентиль: 16%
0.0005
Низкий

6.9 Medium

CVSS4

4.9 Medium

CVSS3

Дефекты

CWE-23

Связанные уязвимости

CVSS3: 4.9
nvd
5 месяцев назад

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administrator privileges to exploit Relative Path Traversal to download arbitrary system files.

EPSS

Процентиль: 16%
0.0005
Низкий

6.9 Medium

CVSS4

4.9 Medium

CVSS3

Дефекты

CWE-23