CVE-2021-37158

OpenGamePanel OGP-Agent-Linux (affected through 2021-08-14) is vulnerable to an authenticated command-injection where an attacker can start a Counter-Strike server and inject OS commands by entering a Bash command in the map field. The issue is described consistently across multiple sources (e.g....

CVE-2021-37158

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command...