CVE-2021-26619

Опубликовано: 18 фев. 2022

Источник: nvd

CVSS3: 7.1

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

An path traversal vulnerability leading to delete arbitrary files was discovered in BigFileAgent. Remote attackers can use this vulnerability to delete arbitrary files of unspecified number of users.

Ссылки

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36457
Third Party Advisory
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36457
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:bigfile:bigfileagent:*:*:*:*:*:*:*:*

Версия до 1.0.1.7 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00902

Низкий

7.1 High

CVSS3

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-xg26-2c9v-8r8w

github

больше 4 лет назад

An path traversal vulnerability leading to delete arbitrary files was discovered in BigFileAgent. Remote attackers can use this vulnerability to delete arbitrary files of unspecified number of users.

EPSS

Процентиль: 57%

0.00902

Низкий

7.1 High

CVSS3

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-22