PT-2022-13117
CVE-2022-0343
·
تاريخ النشر
2022-03-29
·
تاريخ التحديث
2022-04-07
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
SoftwareX versions prior to 24.2
Description
A local attacker, as a different local user, may be able to send a HTTP request to "127.0.0.1:10000" after the user, typically a developer, manually invoked the ./tools/run-dev-server script.
Recommendations
For versions prior to 24.2, it is recommended to upgrade to any version beyond 24.2. As a temporary workaround, consider restricting access to the development server to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾