3 matches found
GHSA-FM3M-JRGM-5PPG RatPanel can perform remote command execution without authorization
Summary When an attacker obtains the backend login path of RatPanel including but not limited to weak default paths, brute-force cracking, etc., they can execute system commands or take over hosts managed by the panel without logging in. In addition to this remote code execution RCE vulnerability...