CVE-2024-39907
CVE-2024-39907
Título es
CVE-2024-39907
Jue, 18/07/2024 – 16:15
Tipo
CWE-89
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2024-39907
Descripción en
1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues.
18/07/2024
18/07/2024
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Gravedad 3.1 (CVSS 3.1 Base Score)
9.80
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
CRITICAL
Enviar en el boletín
Off
