Описание
pyload is an open-source Download Manager written in pure Python. An authenticated user can change the download folder and upload a crafted template to the specified folder lead to remote code execution. There is no fix available at the time of publication.
Ссылки
- ExploitVendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.5.0 (включая)
cpe:2.3:a:pyload:pyload:*:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03976
Низкий
9.1 Critical
CVSS3
7.2 High
CVSS3
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 9.1
debian
почти 2 года назад
pyload is an open-source Download Manager written in pure Python. An a ...
CVSS3: 9.1
github
почти 2 года назад
pyLoad allows upload to arbitrary folder lead to RCE
EPSS
Процентиль: 88%
0.03976
Низкий
9.1 Critical
CVSS3
7.2 High
CVSS3
Дефекты
CWE-434