Описание
An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2.1.0 (включая)
cpe:2.3:a:digium:asterisk_gui:*:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.01654
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78
CWE-78
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior. An OS command injection vulnerability has been identified that may allow the execution of arbitrary code on the system through the inclusion of OS commands in the URL request of the program.
EPSS
Процентиль: 82%
0.01654
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-78
CWE-78