Vendors / Shellinabox Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Shellinabox Project records in CISA KEV No Shellinabox Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.05986 · Published 2019-03-17 · No fix listed CWE-835
Priority LOW 36
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL.
CVSS 3.0 HIGH 7.4· Network · No auth · User interaction · EPSS 0.02037 · Published 2016-01-12 · No fix listed CWE-254
Open these records in search → All records by CVSS severity
0 2 0 0 0
