Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2023-4517
Disclosure Date: October 13, 2023 (last updated October 18, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.
0
Attacker Value
Unknown
CVE-2023-5084
Disclosure Date: September 20, 2023 (last updated October 10, 2023)
Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.
0
Attacker Value
Unknown
CVE-2021-30070
Disclosure Date: August 18, 2022 (last updated October 08, 2023)
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.
0
