Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vcpj-p3p8-mx6q

Опубликовано: 13 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

Improper input validation vulnerability in Newsletter Software SuperMailer affecting version 11.20.0.2204. An attacker could exploit this vulnerability by sending a malicious configuration file (file with SMB extension) to a user via a link or email attachment and persuade the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to crash the application when attempting to load the malicious file.

Improper input validation vulnerability in Newsletter Software SuperMailer affecting version 11.20.0.2204. An attacker could exploit this vulnerability by sending a malicious configuration file (file with SMB extension) to a user via a link or email attachment and persuade the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to crash the application when attempting to load the malicious file.

EPSS

Процентиль: 6%
0.00025
Низкий

3.3 Low

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 3.3
nvd
около 2 лет назад

Improper input validation vulnerability in Newsletter Software SuperMailer affecting version 11.20.0.2204. An attacker could exploit this vulnerability by sending a malicious configuration file (file with SMB extension) to a user via a link or email attachment and persuade the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to crash the application when attempting to load the malicious file.

EPSS

Процентиль: 6%
0.00025
Низкий

3.3 Low

CVSS3

Дефекты

CWE-20