Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-36623

Опубликовано: 21 дек. 2022
Источник: nvd
CVSS3: 4.3
CVSS3: 6.5
EPSS Низкий

Описание

A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function runApp of the file src/index.js. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The name of the patch is aea66f12b8cdfc3c8c50ad6a9c89d8307e9d0a91. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216475.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pengu_project:pengu:*:*:*:*:*:*:*:*
Версия до 2020-11-02 (исключая)

EPSS

Процентиль: 38%
0.00164
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-863
CWE-352

Связанные уязвимости

CVSS3: 6.5
github
около 3 лет назад

A vulnerability was found in Pengu. It has been declared as problematic. Affected by this vulnerability is the function runApp of the file src/index.js. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The name of the patch is aea66f12b8cdfc3c8c50ad6a9c89d8307e9d0a91. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216475.

EPSS

Процентиль: 38%
0.00164
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-863
CWE-352