Количество 3
Количество 3
CVE-2024-47579
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
GHSA-2mgr-rf47-4329
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
BDU:2024-11028
Уязвимость компонента Adobe Document Service программного средства создания и развертывания веб-приложений SAP NetWeaver AS for Java, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-47579 An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
| GHSA-2mgr-rf47-4329 An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
 | BDU:2024-11028 Уязвимость компонента Adobe Document Service программного средства создания и развертывания веб-приложений SAP NetWeaver AS for Java, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу