exploitDog

CVE-2022-34549

Опубликовано: 27 июл. 2022

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file.

Ссылки

http://cwe.mitre.org/data/definitions/434.html
Third Party Advisory
https://github.com/rawchen/sims/issues/6
Exploit
Issue Tracking
Third Party Advisory
http://cwe.mitre.org/data/definitions/434.html
Third Party Advisory
https://github.com/rawchen/sims/issues/6
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sims_project:sims:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00554

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-vgp3-2wc7-6gv5

CVSS3: 8.8

github

больше 3 лет назад

Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file.

EPSS

Процентиль: 68%

0.00554

Низкий

8.8 High

CVSS3

Дефекты

CWE-434