Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000082

Опубликовано: 13 мар. 2018
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the victim access the infected trigger of the CSRF any code that match the victim privledges on the server can be executed..

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ajenti:ajenti:2:*:*:*:*:*:*:*

EPSS

Процентиль: 74%
0.00798
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.8
debian
почти 8 лет назад

Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) v ...

CVSS3: 8.8
github
больше 3 лет назад

Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the victim access the infected trigger of the CSRF any code that match the victim privledges on the server can be executed..

EPSS

Процентиль: 74%
0.00798
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352