PT-2024-14875
CVE-2023-6078
·
تاريخ النشر
2024-02-01
·
تاريخ التحديث
2024-02-09
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023
Description
An OS Command Injection issue exists, allowing arbitrary command execution through the upload of a specially crafted perl script.
Recommendations
For Release BIOVIA 2021 through Release BIOVIA 2023, consider restricting the upload of perl scripts to minimize the risk of exploitation until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾