exploitDog

CVE-2022-46493

Опубликовано: 22 дек. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.

Ссылки

https://github.com/Fanli2012/nbnbk/issues/1
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Fanli2012/nbnbk/issues/1
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nbnbk_project:nbnbk:-:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00344

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-chpf-j4rw-9gw7

CVSS3: 9.8

github

около 3 лет назад

Default version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.

EPSS

Процентиль: 56%

0.00344

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-434

CWE-434