Описание
Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2.0.0 (включая) до 2.3.2 (исключая)
cpe:2.3:a:hybridsoftware:cloudflow:*:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00214
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-434
CWE-434
Связанные уязвимости
CVSS3: 9.8
github
почти 3 года назад
Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.
EPSS
Процентиль: 44%
0.00214
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-434
CWE-434