Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xf6g-jwwh-xfv8

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.

EPSS

Процентиль: 49%
0.00263
Низкий

7.8 High

CVSS3

Дефекты

CWE-704

Связанные уязвимости

CVSS3: 7.8
nvd
около 7 лет назад

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.

EPSS

Процентиль: 49%
0.00263
Низкий

7.8 High

CVSS3

Дефекты

CWE-704