Описание
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download.
EPSS
Процентиль: 51%
0.00283
Низкий
8.1 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 5.3
github
около 1 года назад
A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download.
EPSS
Процентиль: 51%
0.00283
Низкий
8.1 High
CVSS3
Дефекты
CWE-22