CVE-2021-30070
EUVD-2021-1701418.08.2022, 05:15
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| hestiacp | hestiacp | 𝑥 < 1.3.5 |
𝑥
= Vulnerable software versions
References