Lucene search
GoogleOSV:CVE-2018-19793HistoryDec 03, 2018 - 6:29 a.m.
CVE-2018-19793
2018-12-0306:29:00
Google
osv.dev
5
jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jiacrontab | eq | 1.4.0 | |
| jiacrontab | eq | 1.3.4 | |
| jiacrontab | eq | 1.3.3 | |
| jiacrontab | eq | 1.4.1 | |
| jiacrontab | eq | 1.4.5 | |
| jiacrontab | eq | 1.4-beta.1 | |
| jiacrontab | eq | 1.2.2 | |
| jiacrontab | eq | 1.4.2 | |
| jiacrontab | eq | 1.4.4 | |
| jiacrontab | eq | 1.2.1 |
References
Related
cve
cve
CVE-2018-19793
2018-12-03 06:29:00
prion
prion
Command injection
2018-12-03 06:29:00
cvelist
cvelist
CVE-2018-19793
2018-12-03 06:00:00
nvd
nvd
CVE-2018-19793
2018-12-03 06:29:00