PT-2023-32808 · Rmountjoy92 · Dashmachine
CVSS v2.0
4.7
Média
| Vetor | AV:A/AC:L/Au:M/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
rmountjoy92 DashMachine versions 0.5-4
Description
A problematic issue was found in the Config Handler component, specifically in the /settings/save config file. The manipulation of the
value template argument leads to code injection. The issue has been publicly disclosed and may be exploited.Recommendations
For versions 0.5-4, consider restricting access to the Config Handler component, specifically the /settings/save config file, to minimize the risk of exploitation. As a temporary workaround, avoid using the
value template argument in the affected functionality until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dashmachine