An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file.
An arbitrary file upload vulnerability in the attachment handling component of flatnotes v5.5.4 allows attackers to execute arbitrary code via uploading a crafted HTML or SVG file.
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
| 影响度 | 98.00 |
| 利用信号(无额外利用信号) | ×1.00 |
| VPI | 98.00 |
VPI 公式 vpi-v1