Description
In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution.
Unscored
CVE-2021-44079
EUVD-2021-30937GHSA-v276-37m6-wc5x
In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially…
Published Nov 22, 2021 · Updated Aug 4, 2024 · Assigned by mitre