CVE-2021-34164

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

CVE-2021-34164

Permissions vulnerability in LIZHIFAKA v.2.2.0 allows authenticated attacker to execute arbitrary commands via the set password function in the admin/index/email location...

CVE-2021-34164

CVE-2021-34164 affects Lizhifaka’s web product (v2.2.0). A permissions issue in the admin/index/email set password path allows an authenticated attacker to execute arbitrary commands. The vulnerability is documented with a high impact (C/H/I/A) and network attack vector, requiring low privileges ...