CVE-2022-48079

2023-02-0200:00:00

mitre

www.cve.org

monnai aapanel

v1.5

access control

privilege escalation

arbitrary code execution

php file upload

security vulnerability

AI Score

Confidence

High

EPSS

0.003

Percentile

71.1%

JSON

Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a crafted PHP file to the virtual host directory of the system.

References

mf.mengnai.top/

thanatosxingyu.github.io/