CVE-2021-3317

KLog Server through 2.4.1 allows authenticated command injection

published January 26, 2021

CVSS
—
EPSS
41%
Percentile
98.7
In the wild
Unconfirmed
What it is

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.41394 · 98.7th percentile
Published
2021-01-26T22:33Z
EPSS history
Timeline
  • 26 JAN 22:33Z
    KLog Server through 2.4.1 allows authenticated command injection
    cvelistv5