CVE-2018-16951

xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.

Score

CVSS 3.0 8.0 High

Status

Modified - cve@mitre.org

Published

2018-09-12

Last modified

2024-08-05

Weaknesses

CWE-352

Affected products

• Xunfeng (Xunfeng Project)

References

• https://github.com/ysrc/xunfeng/issues/176