Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vm6g-jx28-wcfp

Опубликовано: 08 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.3

Описание

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.

EPSS

Процентиль: 75%
0.00908
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-426
CWE-668

Связанные уязвимости

CVSS3: 9.3
nvd
около 4 лет назад

NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity.

EPSS

Процентиль: 75%
0.00908
Низкий

9.3 Critical

CVSS3

Дефекты

CWE-426
CWE-668