CVE-2020-29311

2020-12-1021:38:37

mitre

www.cve.org

ubilling software

remote command execution

root user

config file

malicious command

AI Score

9.8

Confidence

High

EPSS

0.018

Percentile

88.4%

JSON

Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software.

References

drive.google.com/file/d/1iLMFSbY8x1CXIf0uFntovY6yZ7N24dQA/view?usp=sharing

drive.google.com/file/d/1smOjvenPB-nE0PyIxnfujCT4KcxxkeWV/view?usp=sharing

gist.github.com/mhaskar/bfa9c2c799fca6697bcc6a213d08cb3e