CVE-2015-2861

概要

参考情報

• vestacp.com/roadmap · Vendor Advisory
• kb.cert.org/vuls/id/842780 · Third Party Advisory
• securityfocus.com/bid/75215
• serghey-rodin/vesta commit 527e4a9

vesta control panel のその他の脆弱性

• CVE-2021-46850高 7.2myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and r…
• CVE-2022-36305中 6.1Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1/upload/UploadHandle…
• CVE-2022-36304中 6.1Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload…
• CVE-2022-36303中 6.1Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/uploa…
• CVE-2022-34025中 6.1Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandle…