28 matches found
eSST Monitoring Code Injection Vulnerability
Sourceforge eSST Monitoring is an open source monitoring system from Sourceforge. A security vulnerability exists in eSST Monitoring version v2.147.1, which stems from a Remote Code Execution RCE vulnerability in the Gii code generator component...
CVE-2023-41630
eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...
CVE-2023-41630
eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the Gii code generator component...
CVE-2023-41629
A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal...
CVE-2023-41631
eSST Monitoring v2.147.1 was discovered to contain a remote code execution RCE vulnerability via the file upload function...
CVE-2023-41630
CVE-2023-41630 affects eSST Monitoring v2.147.1, where the Gii code generator component enables a remote code execution (RCE) vulnerability. The issue is described as an RCE via Gii, with high impact on confidentiality, integrity, and availability as reflected in the CVSS 3.1 score. Public source...
CVE-2023-41631
CVE-2023-41631 affects eSST Monitoring v2.147.1. The vulnerability is a remote code execution (RCE) via the file upload function. Reported CVSSv3.1 base score is 8.8 (HIGH) with network attack vector, low complexity, privileges required: LOW, no user interaction, and impact to confidentiality, in...