Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vf69-hcwp-rxc8

Опубликовано: 30 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the "/embedai/app/uploads/database/<SQL_FILE>" endpoint.

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the "/embedai/app/uploads/database/<SQL_FILE>" endpoint.

EPSS

Процентиль: 31%
0.0012
Низкий

7.5 High

CVSS3

Дефекты

CWE-284
CWE-863

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the "/embedai/app/uploads/database/<SQL_FILE>" endpoint.

EPSS

Процентиль: 31%
0.0012
Низкий

7.5 High

CVSS3

Дефекты

CWE-284
CWE-863