Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend…
Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows an attacker to execute backend IPC commands by convincing a user to open a specially crafted SAZ file.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Progress Software
- Product
- Progress® Telerik® Fiddler® Everywhere
- CVSS v3.1
- 7.3 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
- Weakness
- CWE-79
- Exposure class
- File transfer
- NVD status
- Received
Why it ranks 37 (Notable)
- CVSS v3.1 7.3 high
- Exposed product class: file transfer
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.