CVE-2021-30070

An issue was discovered in HestiaCP before v1.3.5

published August 18, 2022

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00765 · 55.0th percentile
Published
2022-08-18T04:16Z
EPSS history
Timeline
  • 18 AUG 04:16Z
    An issue was discovered in HestiaCP before v1.3.5
    cvelistv5