Описание
A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.
Ссылки
- ExploitThird Party Advisory
- Product
- ExploitIssue TrackingVendor Advisory
- ExploitThird Party Advisory
- Product
- ExploitIssue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:chamilo:chamilo:1.11:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.0103
Низкий
8.8 High
CVSS3
Дефекты
CWE-434
CWE-434
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file.
EPSS
Процентиль: 77%
0.0103
Низкий
8.8 High
CVSS3
Дефекты
CWE-434
CWE-434