Lucene search
+L

CVE-2021-46850

🗓️ 24 Oct 2022 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 93 Views🌐 WEB

Vulnerable to command injection via v_sftp_license parameter in myVesta Control Panel before 0.9.8-26-4

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
The vulnerability of the Vesta Control Panel server’s control panel allows a hacker to execute arbitrary commands.
2 Sep 202600:00
bdu_fstec
cnnvd
CNNVD
Vesta Control Panel 参数注入漏洞
24 Oct 202200:00
cnnvd
cvelist
Cvelist
CVE-2021-46850
24 Oct 202200:00
cvelist
nvd
NVD
CVE-2021-46850
24 Oct 202214:15
nvd
prion
Prion
Command injection
24 Oct 202214:15
prion
ptsecurity
Positive Technologies
PT-2022-12942 · Unknown · Vesta Control Panel
24 Oct 202200:00
ptsecurity
vulncheck_kev
VulnCheck KEV
VulnCheck KEV: CVE-2021-46850
3 Jun 202100:00
vulncheck_kev
vulnrichment
Vulnrichment
CVE-2021-46850
24 Oct 202200:00
vulnrichment
NVD
Node
OR
vestacpcontrol_panelRange<0.9.8-26-43
ParameterPositionPathDescriptionCWE
v_sftp_licenserequest body/edit/serverAuthenticated remote admin can inject commands via v_sftp_license in the POST body to /edit/server.CWE-88

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:15Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.2
EPSS0.05355
SSVC
93