Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-0987

Опубликовано: 29 янв. 2024
Источник: nvd
CVSS3: 6.3
CVSS3: 9.8
CVSS2: 5.8
EPSS Низкий

Описание

A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252252. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:kuerp_project:kuerp:*:*:*:*:*:*:*:*
Версия до 1.0.4 (включая)

EPSS

Процентиль: 40%
0.00181
Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-117
CWE-116

Связанные уязвимости

CVSS3: 6.3
github
около 2 лет назад

A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252252. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 40%
0.00181
Низкий

6.3 Medium

CVSS3

9.8 Critical

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-117
CWE-116