Описание
OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.
Ссылки
- Product
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.3 (исключая)
cpe:2.3:a:rapid7:insightconnect_finger:*:*:*:*:*:rapid7:*:*
EPSS
Процентиль: 53%
0.00833
Низкий
6 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-78
Связанные уязвимости
CVSS3: 6
github
около 1 месяца назад
OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction.
EPSS
Процентиль: 53%
0.00833
Низкий
6 Medium
CVSS3
8.8 High
CVSS3
Дефекты
CWE-78