Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-28976

Опубликовано: 24 апр. 2024
Источник: nvd
CVSS3: 8.8
CVSS3: 7.8
EPSS Низкий

Описание

Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized write access to the files stored on the server filesystem with the privileges of the running web application.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:repository_manager:*:*:*:*:*:*:*:*
Версия до 3.4.5 (исключая)

EPSS

Процентиль: 19%
0.00059
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-20
CWE-22

Связанные уязвимости

CVSS3: 8.8
github
почти 2 года назад

Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized write access to the files stored on the server filesystem with the privileges of the running web application.

EPSS

Процентиль: 19%
0.00059
Низкий

8.8 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-20
CWE-22