Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq67-xx7v-6qmg

Опубликовано: 22 фев. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.

EPSS

Процентиль: 38%
0.00165
Низкий

7.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 7.8
nvd
почти 4 года назад

IBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could be passed into file include commands and the web application could be tricked into including remote files with malicious code. IBM X-Force ID: 216891.

EPSS

Процентиль: 38%
0.00165
Низкий

7.8 High

CVSS3

Дефекты

CWE-77