CVE-2023-2682

A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component MiniHTTPD. The manipulation of the argument address with the input ;id;uname$IFS-a leads to command injection. The attack...

CVE-2023-2682

creationtimestamp| type| source ---|---|--- 2023-05-12 16:26:50+00:00| seen| https://t.me/cibsecurity/64009...

CVE-2023-2682 Caton Live Mini_HTTPD ping.cgi command injection

A vulnerability was found in Caton Live up to 2023-04-26 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/ping.cgi of the component MiniHTTPD. The manipulation of the argument address with the input ;id;uname$IFS-a leads to command injection. The attack...

CVE-2023-2682

The CVE-2023-2682 issue affects Caton Live (Mini_HTTPD) and centers on command injection via the /cgi-bin/ping.cgi endpoint. The root cause is manipulation of the address parameter with the input ;id;uname${IFS}-a, enabling remote code execution. Public details indicate the vulnerability is prese...