Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vpwf-h6qc-fgqp

Опубликовано: 16 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

EPSS

Процентиль: 60%
0.00403
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary executable files to perform arbitrary system commands or disrupt service.

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость функции загрузки файлов программного обеспечения OMICARD EDM ITPison, позволяющая нарушителю выполнять произвольные команды

EPSS

Процентиль: 60%
0.00403
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434