Unscored CVE-2021-37158 EUVD-2021-23732GHSA-gcvf-mvcf-24f4

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting…

Published Nov 9, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command.

References

https://www.exploit-db.com/exploits/50373
https://github.com/OpenGamePanel/OGP-Website/pull/561