Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6vc-vm6m-wvhp

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the file name of an uploaded file.

The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the file name of an uploaded file.

EPSS

Процентиль: 66%
0.00526
Низкий

7.3 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.3
nvd
почти 9 лет назад

The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the file name of an uploaded file.

EPSS

Процентиль: 66%
0.00526
Низкий

7.3 High

CVSS3

Дефекты

CWE-284