exploitDog

CVE-2023-26779

Опубликовано: 03 мар. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).

Ссылки

https://github.com/CleverStupidDog/yf-exam/issues/3
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26779
Third Party Advisory
https://github.com/CleverStupidDog/yf-exam/issues/3
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26779
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:yf-exam_project:yf-exam:1.8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01337

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

CWE-502

Связанные уязвимости

GHSA-945w-m377-8wgf

CVSS3: 9.8

github

почти 3 года назад

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).

EPSS

Процентиль: 80%

0.01337

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-502

CWE-502