Количество 3
Количество 3
CVE-2024-47580
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability.
GHSA-qjp7-gvrw-vxmf
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability.
BDU:2024-11100
Уязвимость программной платформы SAP NetWeaver AS for Java, связанная с утечкой информации о файлах и каталогах, позволяющая нарушителю обойти существующие ограничения безопасности
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-47580 An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability. | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
| GHSA-qjp7-gvrw-vxmf An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability. | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
 | BDU:2024-11100 Уязвимость программной платформы SAP NetWeaver AS for Java, связанная с утечкой информации о файлах и каталогах, позволяющая нарушителю обойти существующие ограничения безопасности | CVSS3: 6.8 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу