Lucene search

Hestiacp Security Vulnerabilities

cve

CVE-2021-30070

An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.

7.5CVSS

7.5AI Score

0.001EPSS

2022-08-18 05:15 AM

cve

CVE-2023-4517

Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.

5.4CVSS

4.5AI Score

0.0004EPSS

2023-10-13 01:15 PM

cve

CVE-2023-5084

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.

6.1CVSS

6AI Score

0.0005EPSS

2023-09-20 10:15 AM