exploitDog

CVE-2021-32094

Опубликовано: 07 мая 2021

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files.

Ссылки

https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
Third Party Advisory
https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover
Third Party Advisory
https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
Third Party Advisory
https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00911

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-4c4c-c4fg-2wpp

github

больше 3 лет назад

U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files.

EPSS

Процентиль: 75%

0.00911

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434