CVE-2020-10808

Опубликовано: 22 мар. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Высокий

Описание

Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demonstrated by an FTP session that renames .bash_logout to a .bash_logout' substring followed by shell metacharacters.

Ссылки

http://packetstormsecurity.com/files/157111/Vesta-Control-Panel-Authenticated-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/157219/Vesta-Control-Panel-Authenticated-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://forum.vestacp.com/viewforum.php?f=25
Release Notes
Vendor Advisory
https://github.com/rapid7/metasploit-framework/pull/13094
Patch
Third Party Advisory
https://pentest.blog/vesta-control-panel-second-order-remote-code-execution-0day-step-by-step-analysis/
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/157111/Vesta-Control-Panel-Authenticated-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/157219/Vesta-Control-Panel-Authenticated-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
https://forum.vestacp.com/viewforum.php?f=25
Release Notes
Vendor Advisory
https://github.com/rapid7/metasploit-framework/pull/13094
Patch
Third Party Advisory
https://pentest.blog/vesta-control-panel-second-order-remote-code-execution-0day-step-by-step-analysis/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:vestacp:vesta_control_panel:*:*:*:*:*:*:*:*

Версия до 0.9.8-26 (включая)

EPSS

Процентиль: 99%

0.84554

Высокий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-m5mw-mfp4-fj4f