Описание
OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.
Ссылки
- Product
- Vendor Advisory
- Product
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:uniguest:tripleplay:3.4.0:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.01169
Низкий
5.4 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-78
CWE-78
Связанные уязвимости
CVSS3: 5.4
github
почти 3 года назад
OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.
EPSS
Процентиль: 78%
0.01169
Низкий
5.4 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-78
CWE-78