CVE-2018-1000082
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the victim access the infected trigger of the CSRF any code that match the victim privledges on the server can be executed..
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2018-03-13
- Last modified
- 2024-08-05
- Weaknesses
- CWE-352
Affected products
References
- https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee
