Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vgx4-pwq6-64p2

Опубликовано: 04 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.

EPSS

Процентиль: 78%
0.011
Низкий

8.7 High

CVSS4

Дефекты

CWE-88

Связанные уязвимости

nvd
14 дней назад

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save endpoint that suffers from a parameter injection flaw. Attackers can inject shell metacharacters to execute arbitrary commands on the server.

EPSS

Процентиль: 78%
0.011
Низкий

8.7 High

CVSS4

Дефекты

CWE-88