exploitDog

CVE-2022-40037

Опубликовано: 26 янв. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile.

Ссылки

https://github.com/rawchen/blog-ssm/issues/2
Exploit
Issue Tracking
Third Party Advisory
https://github.com/rawchen/blog-ssm/issues/2
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:javaweb_blog_project:javaweb_blog:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01394

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-2gq6-5f59-3m4h

CVSS3: 9.8

github

около 3 лет назад

An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile.

EPSS

Процентиль: 80%

0.01394

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

CWE-434