CVE-2023-32976CWE-78
Container Station
Medium · published October 13, 2023
What it is
An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following version:
Container Station 2.6.7.44 and later
The record
Technical detail
- CVSS v3.1
- 6.6 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01289 · 70.0th percentile
- Weakness
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- Published
- 2023-10-13T19:16Z
EPSS history
Timeline
13 OCT 19:16Z
Container Station
cvelistv5