Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qqr8-hrr4-phvx

Опубликовано: 05 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files.

An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files.

EPSS

Процентиль: 90%
0.05831
Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
почти 4 года назад

An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files.

EPSS

Процентиль: 90%
0.05831
Низкий

8.8 High

CVSS3

Дефекты

CWE-78