Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-6899

Опубликовано: 17 дек. 2023
Источник: nvd
CVSS3: 4.3
CVSS3: 9.8
CVSS2: 4.7
EPSS Низкий

Описание

A vulnerability classified as problematic was found in rmountjoy92 DashMachine 0.5-4. Affected by this vulnerability is an unknown functionality of the file /settings/save_config of the component Config Handler. The manipulation of the argument value_template leads to code injection. The exploit has been disclosed to the public and may be used. The identifier VDB-248257 was assigned to this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:rmountjoy92:dashmachine:0.5-4:*:*:*:*:*:*:*

EPSS

Процентиль: 18%
0.00058
Низкий

4.3 Medium

CVSS3

9.8 Critical

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 4.3
github
около 2 лет назад

A vulnerability classified as problematic was found in rmountjoy92 DashMachine 0.5-4. Affected by this vulnerability is an unknown functionality of the file /settings/save_config of the component Config Handler. The manipulation of the argument value_template leads to code injection. The exploit has been disclosed to the public and may be used. The identifier VDB-248257 was assigned to this vulnerability.

EPSS

Процентиль: 18%
0.00058
Низкий

4.3 Medium

CVSS3

9.8 Critical

CVSS3

4.7 Medium

CVSS2

Дефекты

CWE-94