Command injection in daemonControl() (/web/api/app/Controller/HostController.php):
Any authenticated user can construct an api command to execute any shell command as the web user.
Patches
Fixed by 3bd58d8. Fix released in 1.36.33 and 1.37.33.
Workarounds
Apply patch manually.
###Credits Aymen Borgi
Severity
High
7.1
/ 10
CVSS base metrics
Attack vector
Network
Attack complexity
Low
Privileges required
Low
User interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
None
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVE ID
CVE-2023-26039
Weaknesses
No CWEs
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.
Impact
Command injection in daemonControl() (
/web/api/app/Controller/HostController.php):Any authenticated user can construct an api command to execute any shell command as the web user.
Patches
Fixed by 3bd58d8. Fix released in 1.36.33 and 1.37.33.
Workarounds
Apply patch manually.
###Credits Aymen Borgi