Описание
A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.
Ссылки
- Issue TrackingVendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.50.5 (исключая)
cpe:2.3:a:cert:vince:*:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04288
Низкий
8.8 High
CVSS3
Дефекты
CWE-502
CWE-502
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.
EPSS
Процентиль: 89%
0.04288
Низкий
8.8 High
CVSS3
Дефекты
CWE-502
CWE-502