Lucene search
Veracode Vulnerability DatabaseVERACODE:8065HistoryDec 21, 2018 - 9:55 a.m.
Remote Code Execution (RCE)
2018-12-2109:55:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.004
Percentile
73.6%
esigate-core is vulnerable to remote code execution (RCE). The ESIGate supports esi:include tag along with stylesheet attribute which would allow a remote attacker to execute code on the server with a user specified XSLT.
References
Related
cvelist
cvelist
CVE-2018-1000854
2018-12-20 16:00:00
osv
osv
Remote Code Execution in esigate-core
2018-12-21 17:46:23
CVE-2018-1000854
2018-12-20 17:29:00
prion
prion
Design/Logic Flaw
2018-12-20 17:29:00
nvd
nvd
CVE-2018-1000854
2018-12-20 17:29:00
cve
cve
CVE-2018-1000854
2018-12-20 17:29:00
github
github
Remote Code Execution in esigate-core
2018-12-21 17:46:23