Security Advisory

CVE-2020-29390

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-11-30 17:24:17

Last updated 2024-08-04 16:55:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthenticated attacker to execute a system command by using shell metacharacters and the %0a character.

← Browse all CVEs View on cve.org ↗