Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-15537

Опубликовано: 29 нояб. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ocsinventory-ng:ocsinventory_ng:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.0229
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 7 лет назад

Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests.

CVSS3: 8.8
debian
около 7 лет назад

Unrestricted file upload (with remote code execution) in OCS Inventory ...

CVSS3: 8.8
github
больше 3 лет назад

Unrestricted file upload (with remote code execution) in OCS Inventory NG ocsreports allows a privileged user to gain access to the server via crafted HTTP requests.

EPSS

Процентиль: 84%
0.0229
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434