Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x43w-5rg4-fwj4

Опубликовано: 03 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.

Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.

EPSS

Процентиль: 7%
0.00026
Низкий

7.8 High

CVSS3

Дефекты

CWE-428

Связанные уязвимости

CVSS3: 7.8
nvd
почти 2 года назад

Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.

EPSS

Процентиль: 7%
0.00026
Низкий

7.8 High

CVSS3

Дефекты

CWE-428