Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wj6j-6g37-7vch

Опубликовано: 09 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type.

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type.

EPSS

Процентиль: 29%
0.00108
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for the file extension and MIME type.

EPSS

Процентиль: 29%
0.00108
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434