Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/10 12:00 a.m.•2 views

CVE-2024-8504: Improper Neutralization of Special Elements used in an OS Command

An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective...

8.8CVSS8.4AI score0.76217EPSS
SaveExploits7References1
Rows per page
Query Builder