Enhancement: vulnerabilities/other/oa-tongda-path-traversal.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-05-30 10:36:06 -04:00
parent 480c2fca93
commit 69702aa586
1 changed files with 9 additions and 1 deletions

View File

@ -1,11 +1,17 @@
id: oa-tongda-path-traversal
info:
name: OA TongDa Path Traversal
name: OA TongDa - Path Traversal
author: pikpikcu
severity: critical
description: Office Anywhere (OA) is susceptible to path traversal vulnerabilities which can be leveraged to perform remote code execution.
reference:
- https://github.com/jas502n/OA-tongda-RCE
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0
cve-id:
cwe-id: CWE-77
tags: tongda,lfi
requests:
@ -33,3 +39,5 @@ requests:
- type: status
status:
- 200
# Enhanced by mp on 2022/05/30