Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: hestiacp/hestiacp 1.6.6 Clear all filters
TI-2022-02437 CVE-2022-2636 · GHSA-6jj2-jrr7-fmxq

Code Injection in hestiacp/hestiacp

Priority MEDIUM 41

Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01362 Published 2022-08-05 Fixed in 1.6.6 CWE-94
TI-2022-02428 CVE-2022-2626 · GHSA-v9r4-jmp3-ch5f

Incorrect Privilege Assignment in hestiacp/hestiacp

Priority LOW 34

Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0131 Published 2022-08-05 Fixed in 1.6.6 CWE-266