Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6p8-wpfj-2gpr

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 2.7

Описание

In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.

In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.

EPSS

Процентиль: 61%
0.00415
Низкий

2.7 Low

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 2.7
nvd
почти 7 лет назад

In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.

EPSS

Процентиль: 61%
0.00415
Низкий

2.7 Low

CVSS3

Дефекты

CWE-22