Описание
Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.
Ссылки
- MitigationVendor Advisory
- MitigationVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:synology:office:2.2.0-1502:*:*:*:*:*:*:*
cpe:2.3:a:synology:office:2.2.1-1506:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02501
Низкий
7.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the crafted file name of RTF documents.
EPSS
Процентиль: 85%
0.02501
Низкий
7.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-78