exploitDog

GHSA-wm3q-pqjp-rmpp

Опубликовано: 14 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 5.3

Описание

CMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajax_get_templates.php, /modules/DesignManager/action.ajax_get_stylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php.

CMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajax_get_templates.php, /modules/DesignManager/action.ajax_get_stylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php.

Ссылки

EPSS

Процентиль: 64%

0.00477

Низкий

5.3 Medium

CVSS3

CVE ID

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-10523

CVSS3: 5.3

nvd

почти 8 лет назад

CMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajax_get_templates.php, /modules/DesignManager/action.ajax_get_stylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php.

EPSS

Процентиль: 64%

0.00477

Низкий

5.3 Medium

CVSS3

CVE ID

Дефекты

CWE-200