Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wxxf-gjw8-32x8

Опубликовано: 12 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

Due to improper Spring Security configuration, SAP Commerce cloud allows an unauthenticated user to perform malicious configuration upload and code injection, resulting in arbitrary server-side code execution, leading to high impact on Confidentiality, Integrity, and Availability of the application.

Due to improper Spring Security configuration, SAP Commerce cloud allows an unauthenticated user to perform malicious configuration upload and code injection, resulting in arbitrary server-side code execution, leading to high impact on Confidentiality, Integrity, and Availability of the application.

EPSS

Процентиль: 46%
0.0061
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-459

Связанные уязвимости

CVSS3: 9.6
nvd
3 месяца назад

Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-side code execution, leading to high impact on Confidentiality, Integrity, and Availability of the application.

CVSS3: 9.6
fstec
3 месяца назад

Уязвимость платформы электронной коммерции SAP Commerce Cloud, связанная с передачей критичной информации открытым текстом, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 46%
0.0061
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-459