Описание
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to upload arbitrary file types. This could allow an attacker to upload malicious files, that could potentially lead to code tampering.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
EPSS
5.7 Medium
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to upload arbitrary file types. This could allow an attacker to upload malicious files, that could potentially lead to code tampering.
Уязвимость программного обеспечения управления качеством для производителей автомобилей QMS Automotive, связанная с неограниченной загрузкой файлов опасного типа, позволяющая нарушителю выполнить произвольный код
EPSS
5.7 Medium
CVSS3
8.8 High
CVSS3