Description (CNA)
Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| hestiacp / hestiacp/hestiacp | affected unspecified before 1.5.12 |
CWE
CWE-77
References
- https://huntr.dev/bounties/09e69dff-f281-4e51-8312-ed7ab7606338
- https://github.com/hestiacp/hestiacp/commit/d50f95cf208049dfb6ac67a8020802121745bd60
ADP enrichment
No English description supplied.