Описание
CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sun.net:ehrd_cpas:*:*:*:*:*:*:*:*
cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00465
Низкий
7.2 High
CVSS3
Дефекты
CWE-434
Связанные уязвимости
CVSS3: 7.2
github
3 месяца назад
CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
EPSS
Процентиль: 38%
0.00465
Низкий
7.2 High
CVSS3
Дефекты
CWE-434