CVE-2018-19793

jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as…

published December 3, 2018

CVSS
—
EPSS
2%
Percentile
83.6
In the wild
Unconfirmed
What it is

jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02370 · 83.6th percentile
Published
2018-12-03T06:00Z
EPSS history
Timeline
  • 03 DEC 06:00Z
    jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as…
    cvelistv5