Описание
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
EPSS
Процентиль: 5%
0.00151
Низкий
8.4 High
CVSS3
Дефекты
CWE-693
Связанные уязвимости
CVSS3: 7.8
github
3 дня назад
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
EPSS
Процентиль: 5%
0.00151
Низкий
8.4 High
CVSS3
Дефекты
CWE-693