Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-53945

Опубликовано: 19 дек. 2025
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:brainycp:brainycp:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00358
Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
github
около 2 месяцев назад

BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface. Attackers can exploit the crontab endpoint by adding a malicious command that spawns a reverse shell to a specified IP and port.

EPSS

Процентиль: 58%
0.00358
Низкий

8.8 High

CVSS3

Дефекты

CWE-78