CVE-2023-5839

Description

References

• hestiacp/hestiacp commit acb766e · Patch
• huntr.com/bounties/21125f12-64a0-42a3-b218-26b9945a5bc0 · Exploit

More vulnerabilities in control panel

• CVE-2025-30008MEDIUM 5.4HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users to inject arbitrary…
• CVE-2025-30007HIGH 8.8HestiaCP before 1.9.5 contains an authenticated OS command injection vulnerability that allows low-privilege authenticated users to execute …
• CVE-2023-3479MEDIUM 6.1Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.
• CVE-2021-30071MEDIUM 6.1A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scrip…
• CVE-2022-2636HIGH 8.8Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.