CVE-2015-3431

Опубликовано: 19 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."

Ссылки

http://www.securityfocus.com/bid/74596
Third Party Advisory
VDB Entry
https://pydio.com/en/community/releases/pydio-core/pydio-607-security-release
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/74596
Third Party Advisory
VDB Entry
https://pydio.com/en/community/releases/pydio-core/pydio-607-security-release
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:pydio:pydio:*:*:*:*:*:*:*:*

Версия до 6.0.6 (включая)

EPSS

Процентиль: 91%

0.06181

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

CVE-2015-3431

CVSS3: 9.8

debian

больше 8 лет назад

Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to ex ...

GHSA-hjjh-jvjg-x639

CVSS3: 9.8

github

больше 3 лет назад

Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."

EPSS

Процентиль: 91%

0.06181

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-78