9.8
CVE-2022-30423
- EPSS 1.02%
- Veröffentlicht 02.06.2022 14:15:52
- Zuletzt bearbeitet 21.11.2024 07:02:44
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMerchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Merchandise Online Store Project ≫ Merchandise Online Store Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.02% | 0.753 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.