Описание
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env_vars parameter.
EPSS
Процентиль: 68%
0.01281
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-93
Связанные уязвимости
CVSS3: 9.8
github
около 1 месяца назад
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env_vars parameter.
EPSS
Процентиль: 68%
0.01281
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-93