Remote code execution

In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution...

CVE-2021-44079

In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution...

PT-2021-24037

Name of the Vulnerable Software and Affected Versions: Wazuh versions 4.2.x through 4.2.4 Wazuh versions prior to 4.2.5 Description: The issue arises from the wazuh-slack active response script, where untrusted user agents are passed to a curl command line. This could potentially result in remote...

Wazuh command injection vulnerability

Wazuh is Wazuh an open source application. It is used to collect, aggregate, index and analyze security data to help organizations detect intrusions, threats and behavioral anomalies. A command injection vulnerability exists in the wazuh-slack active response script in Wazuh before 4.2.5, which...

CVE-2021-44079: Improper Neutralization of Special Elements used in a Command

In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution...