Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vxf3-94jj-jhmp

Опубликовано: 24 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. (The server process is not affected.)

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. (The server process is not affected.)

EPSS

Процентиль: 31%
0.0012
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 6.5
nvd
больше 1 года назад

MENDELSON AS4 before 2024 B376 has a client-side vulnerability when a trading partner provides prepared XML data. When a victim opens the details of this transaction in the client, files can be written to the computer on which the client process is running. (The server process is not affected.)

EPSS

Процентиль: 31%
0.0012
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-502