PT-2024-16640
CVE-2024-10919
·
تاريخ النشر
2024-11-06
·
تاريخ التحديث
2024-11-08
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
didi Super-Jacoco version 1.0
Description
A critical issue has been found in the software, affecting an unknown functionality of the file /cov/triggerUnitCover. The manipulation of the
uuid argument leads to os command injection. This issue can be exploited remotely, potentially allowing system takeover. The exploit has been disclosed publicly.Recommendations
For didi Super-Jacoco version 1.0, patch immediately to prevent os command injection via the
uuid parameter in the /cov/triggerUnitCover file. As a temporary workaround, consider restricting access to the /cov/triggerUnitCover file until a patch is available. Verify that there has been no unauthorized access to the system.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾