PT-2020-14925
CVE-2020-17363
·
تاريخ النشر
2020-08-23
·
تاريخ التحديث
2021-01-05
الوصف من
CVSS 3.1
9.9
حرجةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
USVN versions prior to 1.0.9
Description
The issue allows remote code execution via shell metacharacters in the
number start or number end parameter to "lasthundredrequestAction" in the Timeline module.Recommendations
For versions prior to 1.0.9, update to version 1.0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the "lasthundredrequestAction" in the Timeline module to minimize the risk of exploitation. Avoid using the
number start or number end parameters in the affected module until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾