Описание
An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.
EPSS
Процентиль: 18%
0.00059
Низкий
7.8 High
CVSS3
Дефекты
CWE-502
Связанные уязвимости
CVSS3: 7.8
github
5 месяцев назад
An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.
EPSS
Процентиль: 18%
0.00059
Низкий
7.8 High
CVSS3
Дефекты
CWE-502