CVE-2024-3980 Information
Aug 29, 2024
cve
Description
The product allows user input to control or influence paths or file names that are used in filesystem operations allowing the attacker to access or modify system files or other files that are critical to the application.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Reference
Attack Complexity
LOW
Privileges Required
LOW
User Interaction Required
LOW
Scope
NONE
Confidentiality Impact
UNCHANGED
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
HIGH
Base Severity
8.8
Share on: