Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wfhg-rx29-5vjf

Опубликовано: 27 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL.

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL.

EPSS

Процентиль: 26%
0.00092
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-434
CWE-639

Связанные уязвимости

CVSS3: 6.5
nvd
почти 3 года назад

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL.

EPSS

Процентиль: 26%
0.00092
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-434
CWE-639