Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5854-xw4j-hrh6

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.

EPSS

Процентиль: 48%
0.00675
Низкий

7.7 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.7
nvd
около 1 месяца назад

OS Command Injection vulnerability in the traceroute action of Rapid7 InsightConnect Traceroute Plugin on Linux allows remote attackers to execute arbitrary OS commands via the host, port, max_ttl, count, or time_out request parameters due to insufficient input validation when constructing shell commands.

EPSS

Процентиль: 48%
0.00675
Низкий

7.7 High

CVSS3

Дефекты

CWE-78