Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xhj7-3r6j-f89h

Опубликовано: 19 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 10
CVSS3: 10

Описание

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update path, the _update SQL Server Agent job (@subsystem = N'ActiveScripting') and serv_update.vbs.

This issue affects OZOLS: before 1.1.1233.

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update path, the _update SQL Server Agent job (@subsystem = N'ActiveScripting') and serv_update.vbs.

This issue affects OZOLS: before 1.1.1233.

EPSS

Процентиль: 5%
0.00154
Низкий

10 Critical

CVSS4

10 Critical

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVSS3: 10
nvd
2 дня назад

Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel - OzolsSQL client update path, the <db>_update SQL Server Agent job (@subsystem = N'ActiveScripting') and serv_update.vbs. This issue affects OZOLS: before 1.1.1233.

CVSS3: 10
debian
2 дня назад

Download of code without integrity check, inclusion of functionality f ...

EPSS

Процентиль: 5%
0.00154
Низкий

10 Critical

CVSS4

10 Critical

CVSS3

Дефекты

CWE-319