CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
9.7%
Software
Digital Lottery
Type
Plugin
Vulnerable versions
<= 3.0.5
Fixed in
N/A
OWASP Top 10
A3: Injection
Classification
Arbitrary File Upload
CVE
CVE-2024-49242
Patch priority
High
CVSS severity
High (10)
Developer
Claim ownership
PSID
7676461ee2c0
Credits
stealthcopter
Required privilege
Unauthenticated
Published
14 October, 2024
Expand full details Have additional information or questions about this entry? Let us know.
We advise to mitigate or resolve the vulnerability immediately.
Vendor | Product | Version | CPE |
---|---|---|---|
- | digital_lottery | * | cpe:2.3:a:-:digital_lottery:*:*:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
9.7%