Command injection

2020-04-2117:15:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.9%

JSON

A remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user to execute arbitrary commands on the system via cron jobs.

CPENameOperatorVersion
vesta_control_paneleq<= 0.9.8-26

CPE	Name	Operator	Version
	vesta_control_panel	eq	<= 0.9.8-26

References

gitlab.com/snippets/1954764