Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w6m2-rf66-q93w

Опубликовано: 15 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restrictions, such as when U+1FEF is converted to a backtick.

lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restrictions, such as when U+1FEF is converted to a backtick.

EPSS

Процентиль: 42%
0.00196
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-116

Связанные уязвимости

CVSS3: 5.3
nvd
около 2 лет назад

lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restrictions, such as when U+1FEF is converted to a backtick.

EPSS

Процентиль: 42%
0.00196
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-116