Lsyncd Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lsyncd Project records in CISA KEV

No Lsyncd Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Lsyncd · all components

TI-2014-07322 CVE-2014-8990 · GHSA-2jg7-cr9w-6gw3

MEDIUM 41

default-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05236 Published 2014-12-05 No fix listed CWE-77