Description
Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ajenti | ajenti | < 2.2.15 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ajenti-panel | < 2.2.15 | 2.2.15 | GHSA-73jv-44c3-j5p2 |