Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-3939

Опубликовано: 11 нояб. 2022
Источник: nvd
CVSS3: 6.3
CVSS3: 9.8
EPSS Низкий

Описание

A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely. VDB-213446 is the identifier assigned to this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ferry_project:ferry:-:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.0041
Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 9.8
github
около 3 лет назад

A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The attack may be launched remotely. VDB-213446 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 61%
0.0041
Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-22