CVE-2020-23151

2021-08-0922:54:16

mitre

www.cve.org

rconfig vulnerability

command injection

ajaxarchivefiles.php

cve-2020-23151

AI Score

9.7

Confidence

High

EPSS

0.224

Percentile

96.6%

JSON

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.

References

cwe.mitre.org/data/definitions/78.html

github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/lib/ajaxHandlers/ajaxArchiveFiles.php#L13