Beveiligingsadvies

CVE-2024-3775

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-15 02:41:18
Laatst bijgewerkt 2024-08-01 20:20:01
Toegewezen door twcert
CVSS-score 5.3
Status PUBLISHED

Beschrijving

aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user input. This allows attackers to pass arbitrary arguments to youtube-dl.exe, leading to the download of partial unauthorized files.