exploitDog

CVE-2022-40035

Опубликовано: 26 янв. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.

Ссылки

https://github.com/rawchen/blog-ssm/issues/3
Exploit
Issue Tracking
Third Party Advisory
https://github.com/rawchen/blog-ssm/issues/3
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:blog-ssm_project:blog-ssm:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00526

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-7c33-9gxw-xjff

CVSS3: 8.8

github

около 3 лет назад

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.

EPSS

Процентиль: 66%

0.00526

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

CWE-434