| Package | Affected versions | Patched versions |
|---|---|---|
| eve-ng | ≤ 2.0.3-112≤ 4.0.1-65 |
An OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through 4.0.1-65 and Eve-NG Community through 2.0.3-112 allows a remote authenticated attacker to execute commands as root by editing virtualization command parameters of imported UNL files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free