Skip to content
OpenAdvisories

Package · PyPI

ajenti-panel

6 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2

    Ajenti has an authorization bypass during custom package installation

    Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.