CVE-2023-4517

概要

参考情報

• hestiacp/hestiacp commit d30e3ed · Patch
• huntr.dev/bounties/508d1d21-c45d-47ff-833f-50c671882e51 · Exploit

hestiacp のその他の脆弱性

• CVE-2023-5084中 6.1Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.
• CVE-2021-30070高 7.5An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] pa…