Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-42122

Опубликовано: 30 нояб. 2021
Источник: nvd
CVSS3: 4.3
CVSS3: 4.3
CVSS2: 4
EPSS Низкий

Описание

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which makes the affected attribute non-editable.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:businessdnasolutions:topease:*:*:*:*:*:*:*:*
Версия до 7.1.27 (включая)

EPSS

Процентиль: 36%
0.00147
Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20
CWE-20

Связанные уязвимости

github
около 4 лет назад

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which makes the affected attribute non-editable.

EPSS

Процентиль: 36%
0.00147
Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20
CWE-20