Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-37372

Опубликовано: 09 янв. 2025
Источник: nvd
CVSS3: 3.6
EPSS Низкий

Описание

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

EPSS

Процентиль: 42%
0.00488
Низкий

3.6 Low

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 3.6
ubuntu
почти 2 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
redhat
почти 2 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

msrc
около 1 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

CVSS3: 3.6
debian
почти 2 года назад

The Permission Model assumes that any path starting with two backslash ...

CVSS3: 3.6
github
почти 2 года назад

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases.

EPSS

Процентиль: 42%
0.00488
Низкий

3.6 Low

CVSS3

Дефекты

CWE-22