Описание
Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.
Ссылки
- Patch
- Exploit
- Patch
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:mintplexlabs:anythingllm:-:*:*:*:*:*:*:*
EPSS
Процентиль: 42%
0.00195
Низкий
9.6 Critical
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 9.6
github
почти 2 года назад
Attacker, with permission to submit a link or submits a link via POST to be collected that is using the file:// protocol can then introspect host files and other relatively stored files.
EPSS
Процентиль: 42%
0.00195
Низкий
9.6 Critical
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-918