CVE-2018-1000081

EPSS 0.33%

發布日:2018/3/13修改日:2025/10/9

描述

Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can freeze te server by sending a giant string to the ID parameter ..

受影響套件(1)

PyPI/ajenti-panelfrom 0

參考連結(3)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-1000081
PATCHhttps://pypi.org/project/ajenti-panel
WEBhttps://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee