Описание
Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types.
EPSS
Процентиль: 87%
0.03267
Низкий
8 High
CVSS3
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 8
github
больше 1 года назад
Unrestricted File Upload in the Discussions tab in Operately v.0.1.0 allows a privileged user to achieve Remote Code Execution via uploading and executing malicious files without validating file extensions or content types.
EPSS
Процентиль: 87%
0.03267
Низкий
8 High
CVSS3
Дефекты
CWE-434