Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xg84-7mcj-v6mx

Опубликовано: 01 мая 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 7.3

Описание

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1 is recommended to address this issue. Upgrading the affected component is advised.

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1 is recommended to address this issue. Upgrading the affected component is advised.

EPSS

Процентиль: 34%
0.00418
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 7.3
nvd
3 месяца назад

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1 is recommended to address this issue. Upgrading the affected component is advised.

EPSS

Процентиль: 34%
0.00418
Низкий

5.5 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-22