Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-7658

Опубликовано: 12 авг. 2024
Источник: nvd
CVSS3: 5.3
CVSS2: 5
EPSS Низкий

Описание

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720 is able to address this issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:projectsend:projectsend:*:*:*:*:*:*:*:*
Версия до r1720 (исключая)

EPSS

Процентиль: 55%
0.00323
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-99
CWE-639

Связанные уязвимости

CVSS3: 5.3
github
больше 1 года назад

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_preview of the file process.php. The manipulation leads to improper control of resource identifiers. The attack may be initiated remotely. Upgrading to version r1720 is able to address this issue. The patch is named eb5a04774927e5855b9d0e5870a2aae5a3dc5a08. It is recommended to upgrade the affected component.

EPSS

Процентиль: 55%
0.00323
Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-99
CWE-639