CVE-2023-37292

CRITICAL 9.8CVE-2023-37292 · Published 21/07/2023 · updated 17/06/2026

In short

CVE-2023-37292 is a CRITICAL (CVSS 9.8) vulnerability affecting isherlock (hgiga).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.8% of all vulnerabilities.
Fix: update to 4.5-174, 5.5-174 or later.

Package	Affected versions	Patched versions
isherlock hgiga	`≥ 4.5, < 4.5-174≥ 5.5, < 5.5-174`	`4.5-1745.5-174`

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock 5.5: before iSherlock-user-5.5-174.

References

twcert.org.tw/tw/cp-132-7239-8fc29-1.html · Third Party Advisory

More vulnerabilities in isherlock

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

isherlock

hgiga

≥ 4.5, < 4.5-174≥ 5.5, < 5.5-174

4.5-1745.5-174

Description

More vulnerabilities in isherlock

See all →