CVE-2022-27903

An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files...

PT-2022-18678

Name of the Vulnerable Software and Affected Versions Eve-NG Professional versions 4.0.1-65 and earlier Eve-NG Community versions 2.0.3-112 and earlier Description The issue allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported...