CVE-2021-33525

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to…

published May 24, 2021

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07740 · 94.6th percentile
Published
2021-05-24T19:48Z
EPSS history
Timeline
  • 24 MAY 19:48Z
    EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to…
    cvelistv5