Описание
Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snippet function of the metersphere system workbench
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:metersphere:metersphere:1.20.20-lts-79d354a6:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.0488
Низкий
9.8 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-78
Связанные уязвимости
CVSS3: 9.8
github
больше 2 лет назад
Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snippet function of the metersphere system workbench
EPSS
Процентиль: 89%
0.0488
Низкий
9.8 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-78