Lucene search

K
githubGitHub Advisory DatabaseGHSA-V3V9-3JF4-5PXX
HistoryJun 07, 2023 - 9:30 p.m.

Jeecg P3 Biz Chat allows remote attackers to read arbitrary files

2023-06-0721:30:18
CWE-668
GitHub Advisory Database
github.com
11
jeecg p3 biz chat
1.0.5
remote file read
security vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.005 Low

EPSS

Percentile

76.2%

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.

Affected configurations

Vulners
Node
jeecg_p3_biz_chat_projectjeecg_p3_biz_chatRange1.0.5wordpress

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.005 Low

EPSS

Percentile

76.2%

Related for GHSA-V3V9-3JF4-5PXX