CVE-2018-7046

Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic…

published February 20, 2018

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .NET code evaluation context via C# code in a "Pages -> Edit -> Template -> Edit template properties -> Layout" box. NOTE: the vendor has responded that there is intended functionality for authorized users to edit and update ascx code layout

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05416 · 92.7th percentile
Published
2018-02-20T15:00Z
EPSS history
Timeline
  • 20 FEB 15:00Z
    Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic…
    cvelistv5