Поиск уязвимостей
Количество 3
Количество 3
CVE-2018-12909
Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment.
GHSA-fp34-qqcc-2392
** DISPUTED ** Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment."
ALT-PU-2023-8422
ALT-PU-2023-8422: package `webgrind` update to version 1.9.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-12909 Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment. | CVSS3: 7.5 | 16% Средний | больше 8 лет назад |
| GHSA-fp34-qqcc-2392 ** DISPUTED ** Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has access to) via an index.php?op=fileviewer&file= URI. NOTE: the vendor indicates that the product is not intended for a "publicly accessible environment." | CVSS3: 7.5 | 16% Средний | больше 4 лет назад |
| ALT-PU-2023-8422 ALT-PU-2023-8422: package `webgrind` update to version 1.9.3-alt1 | CVSS3: 7.5 | 16% Средний | больше 2 лет назад |
Уязвимостей на страницу