CVE-2023-30802mediumCWE-540

CVE-2023-30802: falha de média gravidade em Sangfor Net-Gen Application Firewall

Sangfor Next-Gen Application Firewall Source Code Disclosure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Net-Gen Application Firewall

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.8%
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Sangfor · Net-Gen Application Firewall
CVEs relacionadas — Sangfor Net-Gen Application Firewall

No mesmo produto, das mais perigosas para as menos.

CVE-2023-30806CRITICALSangfor Next-Gen Application Firewall PHPSESSID Command InjectionEPSS 65.0%CVE-2023-30805CRITICALSangfor Next-Gen Application Firewall Login Un Param Command InjectionEPSS 65.0%CVE-2023-30803CRITICALSangfor Next-Gen Application Firewall Authentication BypassEPSS 20.9%