Описание
FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation.
Ссылки
EPSS
Процентиль: 61%
0.01022
Низкий
Дефекты
CWE-78
Связанные уязвимости
github
около 1 года назад
FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The exec_raw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation.
EPSS
Процентиль: 61%
0.01022
Низкий
Дефекты
CWE-78