OneDev vulnerable to arbitrary file reading for unauthenticated user
63Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 8.7epss 25%
de la publicación al arma0 días
Publicada en NVD21 oct
metasploit19 oct
VulnCheck+572d
probabilidad de explotación
25%top 2% de las CVE
explotación observada
síVulnCheck
OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
theonedev · onedev