Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v8qj-6www-vvm2

Опубликовано: 11 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 4.3

Описание

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowing an attacker to determine the existence of arbitrary files on the server.

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowing an attacker to determine the existence of arbitrary files on the server.

EPSS

Процентиль: 11%
0.00042
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 4.3
nvd
около 1 месяца назад

A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack. This issue requires an authenticated attacker with at least user-level privileges. A specific parameter is not properly sanitized or normalized, potentially allowing an attacker to determine the existence of arbitrary files on the server.

CVSS3: 4.3
fstec
2 месяца назад

Уязвимость функции NetworkServlet.processImportRequest() системы централизованного управления сетевыми устройствами и портами Advantech iView, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 11%
0.00042
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-22