CVE-2021-26814

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI

published March 6, 2021

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08746 · 95.2th percentile
Published
2021-03-06T01:24Z
EPSS history
Timeline
  • 06 MAR 01:24Z
    Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI
    cvelistv5