Command injection

2024-02-0720:15:00

PRIOn knowledge base

www.prio-n.com

schuhfried vulnerability

remote attack

database password theft

command injection

nvd

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.9%

An issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via crafted curl command.

CPENameOperatorVersion
schuhfriedle8.22.00

CPE	Name	Operator	Version
	schuhfried	le	8.22.00

References

github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2023-38995-Schuhfried-Preauth-PrivEsc.pdf