CPE Details
Hestia Control Panel 1.4.11
1.4.11
2021-09-21
13h27 +00:00
13h27 +00:00
2021-09-21
13h32 +00:00
13h32 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:hestiacp:control_panel:1.4.11:*:*:*:*:*:*:*
Informations
Vendor
hestiacpProduct
control_panelVersion
1.4.11Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9. | 7.8 |
High |
||
| Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8. | 6.1 |
Medium |
||
| Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6. | 8.8 |
High |
||
| Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6. | 7.2 |
High |
||
| OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5. | 8.8 |
High |
||
| Command Injection Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.12. An authenticated remote attacker with low privileges can execute arbitrary code under root context. | 9.9 |
Critical |
||
| Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11. | 6.1 |
Medium |
||
| Cross-site Scripting (XSS) - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9. | 6.1 |
Medium |
||
| Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10. | 6.1 |
Medium |
||
| Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.9. | 6.1 |
Medium |
||
| hestiacp is vulnerable to Use of Wrong Operator in String Comparison | 9.8 |
Critical |
