critical9.9
CVE-2022-1509
Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12.
Impact
Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hestiacp | Control Panel | before 1.5.12 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/hestiacp/hestiacp/commit/d50f95cf208049dfb6ac67a8020802121745bd60
- https://huntr.dev/bounties/09e69dff-f281-4e51-8312-ed7ab7606338
- https://github.com/hestiacp/hestiacp/commit/d50f95cf208049dfb6ac67a8020802121745bd60
- https://huntr.dev/bounties/09e69dff-f281-4e51-8312-ed7ab7606338