Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xxfp-pgx8-h38x

Опубликовано: 18 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

EPSS

Процентиль: 61%
0.00424
Низкий

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.8
nvd
около 3 лет назад

Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

EPSS

Процентиль: 61%
0.00424
Низкий

8.8 High

CVSS3

Дефекты

CWE-89