Описание
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction.
Ссылки
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.2 (исключая)
Одновременно
cpe:2.3:a:rapid7:insightconnect_rpm:*:*:*:*:*:rapid7:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00833
Низкий
6 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 6
github
около 1 месяца назад
OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the repo, key, or name parameters due to insufficient input sanitization in shell command construction.
EPSS
Процентиль: 53%
0.00833
Низкий
6 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-78