Description
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.
Unscored
CVE-2021-30070
EUVD-2021-17014GHSA-7qw8-c2p4-4gxq
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] p…
Published Aug 18, 2022 · Updated Aug 3, 2024 · Assigned by mitre