Описание
super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta.
Ссылки
- Release NotesThird Party Advisory
- ExploitThird Party Advisory
- Release NotesThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:super-xray_project:super-xray:0.1:beta:*:*:*:*:*:*
EPSS
Процентиль: 67%
0.00535
Низкий
6.5 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-94
NVD-CWE-Other
EPSS
Процентиль: 67%
0.00535
Низкий
6.5 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-94
NVD-CWE-Other