Описание
An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParse_Sup/UnzipFile_Upd.cfm is susceptible to a command argument injection vulnerability when processing remote input in the zippass parameter from an authenticated user, leading to the ability to inject arbitrary arguments to 7z.exe.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:echobh:sharecare:8.15.5:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00941
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-88
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered in Echo ShareCare 8.15.5. The UnzipFile feature in Access/EligFeedParse_Sup/UnzipFile_Upd.cfm is susceptible to a command argument injection vulnerability when processing remote input in the zippass parameter from an authenticated user, leading to the ability to inject arbitrary arguments to 7z.exe.
EPSS
Процентиль: 76%
0.00941
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-88