Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-30945

Опубликовано: 26 июн. 2023
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:palantir:clips2:*:*:*:*:*:*:*:*
Версия до 0.111.2 (исключая)
cpe:2.3:a:palantir:video_clip_distributor:*:*:*:*:*:*:*:*
Версия до 0.24.10 (исключая)
cpe:2.3:a:palantir:video_history_service:*:*:*:*:*:*:*:*
Версия до 2.210.3 (исключая)

EPSS

Процентиль: 62%
0.00434
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-22

Связанные уязвимости

github логотип

GHSA-rvq3-c9mq-763g

CVSS3: 9.8
github
больше 2 лет назад

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.

EPSS

Процентиль: 62%
0.00434
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-22
CWE-22