CVE-2021-27886

🗓️ 01 Mar 2021 23:40:47Reported by mitreType

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.j

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-27886	2 Mar 202102:49	–	circl
CNNVD	Kazi Mehedi docker-web-gui 操作系统命令注入漏洞	1 Mar 202100:00	–	cnnvd
Cvelist	CVE-2021-27886	1 Mar 202123:40	–	cvelist
EUVD	EUVD-2021-14623	7 Oct 202500:30	–	euvd
NVD	CVE-2021-27886	2 Mar 202100:15	–	nvd
Packet Storm	Docker Dashboard Remote Command Execution	7 Jul 202100:00	–	packetstorm
Prion	Command injection	2 Mar 202100:15	–	prion
RedhatCVE	CVE-2021-27886	22 May 202521:10	–	redhatcve

NVD

Node

Source	Link
github	www.github.com/rakibtg/docker-web-gui/issues/23
docker	www.docker.com/legal/trademark-guidelines
packetstormsecurity	www.packetstormsecurity.com/files/163416/Docker-Dashboard-Remote-Command-Execution.html
github	www.github.com/rakibtg/docker-web-gui/commit/79cdc41809f2030fce21a1109898bd79e4190661

Parameter	Position	Path	Description	CWE
command	query param	/api/container/command	Command injection in backend API via the command parameter	CWE-78
command	query param	/api/image/command	Command injection in backend API via the command parameter	CWE-78

21 Nov 2024 05:58Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8

EPSS0.22441