Paper/Archive/CVE-2022-2550

CVE-2022-2550

hestiacp hestiacp/hestiacp — OS Command Injection in hestiacp/hestiacp

EPSS 49%CVSS 9.9

critical.is priorityof 100

50

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 98.9.989 × 2019.8 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5.

Affected

ProductAffectedFixed inSource

hestiacp/hestiacpunspecified – < 1.6.51.6.5CNA

Scores by source

@huntrdev (CNA)9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refhuntr.dev/bounties/6ab4384d-bcbe-4d98-bf67-35c3535fc5c7 refgithub.com/hestiacp/hestiacp/commit/3d4c309cf138943cfd1e71ae51556406987aa4bf