Lucene search

K
redhatcveRedhat.comRH:CVE-2018-5704
HistoryMay 20, 2022 - 10:35 p.m.

CVE-2018-5704

2022-05-2022:35:31
redhat.com
access.redhat.com
9
openocd 0.10.0
http post
remote attackers
cross-protocol scripting
arbitrary commands

EPSS

0.003

Percentile

68.4%

Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 port 4444, which allows remote attackers to conduct cross-protocol scripting attacks, and consequently execute arbitrary commands, via a crafted web site.