Описание
Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server .
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.6.17 (исключая)
cpe:2.3:a:digiwin:easyflow_.net:*:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00359
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-36
CWE-22
Связанные уязвимости
CVSS3: 6.5
github
больше 1 года назад
Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote attacker with regular privilege can exploit this vulnerability to download arbitrary files from the remote server .
EPSS
Процентиль: 58%
0.00359
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-36
CWE-22