9
CVE-2023-37502
- EPSS 0.09%
- Veröffentlicht 18.10.2023 23:15:08
- Zuletzt bearbeitet 21.11.2024 08:11:50
- Quelle psirt@hcl.com
- CVE-Watchlists
- Unerledigt
LoginAn unrestricted file upload vulnerability affects HCL Compass
HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by the server or by a user's web browser.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Hcl Compass Version >= 2.0.0 <= 2.0.3
Hcltech ≫ Hcl Compass Version >= 2.2.0 < 2.2.3
Hcltech ≫ Hcl Compass Version2.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.09% | 0.26 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| psirt@hcl.com | 9 | 2.3 | 6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.