exploitDog

CVE-2021-40644

Опубликовано: 30 мар. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.

Ссылки

https://gitee.com/aaluoxiang/oa_system
Third Party Advisory
https://github.com/novysodope/VulReq/blob/main/oa_system
Exploit
Third Party Advisory
https://gitee.com/aaluoxiang/oa_system
Third Party Advisory
https://github.com/novysodope/VulReq/blob/main/oa_system
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oasys_project:oasys:2021-09-07:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.01097

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-33jj-rpwm-v75g

CVSS3: 6.5

github

больше 4 лет назад

An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.

EPSS

Процентиль: 64%

0.01097

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-89