Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-whjh-pf6x-5rxq

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The freshtomato-mips has a vulnerable URL-decoding feature that can lead to memory corruption.

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The freshtomato-mips has a vulnerable URL-decoding feature that can lead to memory corruption.

EPSS

Процентиль: 87%
0.03266
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-mips` has a vulnerable URL-decoding feature that can lead to memory corruption.

EPSS

Процентиль: 87%
0.03266
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-787