CVE-2023-39416

Опубликовано: 18 авг. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.

Ссылки

https://jvn.jp/en/jp/JVN19661362/
Third Party Advisory
https://www.proself.jp/information/149/
Vendor Advisory
https://www.proself.jp/information/150/
Vendor Advisory
https://jvn.jp/en/jp/JVN19661362/
Third Party Advisory
https://www.proself.jp/information/149/
Vendor Advisory
https://www.proself.jp/information/150/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:*

Версия до 1.07 (включая)

cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:*

Версия до 1.62 (включая)

cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:*

Версия до 5.61 (включая)

cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:*

Версия до 5.61 (включая)

EPSS

Процентиль: 68%

0.00563

Низкий

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

GHSA-cjv9-j3cm-36wm