Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wvm5-q52j-8r24

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.

EPSS

Процентиль: 64%
0.00475
Низкий

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 8
nvd
почти 5 лет назад

Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.

EPSS

Процентиль: 64%
0.00475
Низкий

Дефекты

CWE-798