CVE-2023-5839 Privilege Chaining in hestiacp/hestiacp

Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9...

CVE-2023-5839 Privilege Chaining in hestiacp/hestiacp

Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9...

CVE-2023-5839

CVE-2023-5839 affects hestiacp/hestiacp prior to 1.8.9. Connected sources describe a local privilege escalation (privilege chaining) vulnerability exposed by PHP-FPM configuration: an attacker can leverage separate fpm listeners (admin vs www-data), access the admin Unix socket, and execute comma...