Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4xh-qvw9-wq8w

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

EPSS

Процентиль: 35%
0.00146
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 4.9
nvd
почти 2 года назад

A file write vulnerability exists in the OAS Engine Tags Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

EPSS

Процентиль: 35%
0.00146
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-73