Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-54314

Опубликовано: 04 сент. 2025
Источник: msrc
CVSS3: 2.8
EPSS Низкий

Описание

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."

EPSS

Процентиль: 6%
0.00028
Низкий

2.8 Low

CVSS3

Связанные уязвимости

CVSS3: 2.8
ubuntu
4 месяца назад

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."

CVSS3: 2.8
redhat
4 месяца назад

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."

CVSS3: 2.8
nvd
4 месяца назад

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."

CVSS3: 2.8
debian
4 месяца назад

Thor before 1.4.0 can construct an unsafe shell command from library i ...

CVSS3: 7.8
github
4 месяца назад

Withdrawn Advisory: Thor can construct an unsafe shell command from library input.

EPSS

Процентиль: 6%
0.00028
Низкий

2.8 Low

CVSS3