CVE-2023-5084

概要

参考情報

• hestiacp/hestiacp#4013 · Patch
• huntr.dev/bounties/f3340570-6e59-4c72-a7d1-d4b829b4fb45 · Exploit

hestiacp のその他の脆弱性

• CVE-2023-4517中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.
• CVE-2021-30070高 7.5An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] pa…