Описание
Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons.
Уязвимые конфигурации
Конфигурация 1Версия от 2024.03 (включая) до 2024.09 (исключая)
cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00058
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-863
CWE-863
Связанные уязвимости
CVSS3: 6.5
github
больше 1 года назад
Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to supporting application files. A remote unprivileged attacker could potentially exploit this vulnerability to elevate their privileges and upload additional system icons.
EPSS
Процентиль: 18%
0.00058
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-863
CWE-863