Lucene search

GoogleOSV:GO-2023-2026

HistoryAug 21, 2024 - 2:17 p.m.

CasaOS Command Injection vulnerability in github.com/IceWhaleTech/CasaOS

2024-08-2114:17:52

Google

osv.dev

casaos vulnerability command injection icewhaletech github software

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

38.4%

JSON

CasaOS Command Injection vulnerability in github.com/IceWhaleTech/CasaOS

References

github.com/advisories/GHSA-92vc-4fcw-g68q

github.com/IceWhaleTech/CasaOS/blob/96e92842357230098c771bc41fd3baf46189b859/route/v1/samba.go#L121

github.com/IceWhaleTech/CasaOS/blob/96e92842357230098c771bc41fd3baf46189b859/service/connections.go#L58

github.com/IceWhaleTech/CasaOS/commit/af440eac5563644854ff33f72041e52d3fd1f47c

github.com/IceWhaleTech/CasaOS/releases/tag/v0.4.4

nvd.nist.gov/vuln/detail/CVE-2023-37469

securitylab.github.com/advisories/GHSL-2022-119_CasaOS

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

Low

EPSS

0.001

Percentile

38.4%

JSON

Related for OSV:GO-2023-2026