Description

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.

Related CPE's

o

icewhale

casaos

Vulnerable

References

https://github.com/IceWhaleTech/CasaOS/commit/d060968b7ab08e7f8cbfe7ca9ccdfa47afe9bb06

PatchThird Party Advisory

https://github.com/IceWhaleTech/CasaOS/issues/84

ExploitIssue TrackingThird Party Advisory

https://www.star123.top/2022/01/08/A-vulnerability-in-CasaOS/

ExploitMitigationThird Party Advisory

https://www.star123.top/2022/01/08/A-vulnerability-in-CasaOS/#more

ExploitThird Party Advisory

https://github.com/IceWhaleTech/CasaOS/commit/d060968b7ab08e7f8cbfe7ca9ccdfa47afe9bb06

PatchThird Party Advisory

https://github.com/IceWhaleTech/CasaOS/issues/84

ExploitIssue TrackingThird Party Advisory

https://www.star123.top/2022/01/08/A-vulnerability-in-CasaOS/

ExploitMitigationThird Party Advisory

https://www.star123.top/2022/01/08/A-vulnerability-in-CasaOS/#more

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-78

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2022-03-10T16:45:59.733Z

4 years ago

Last modified

2024-11-21T05:49:59.023Z

1 year ago