Security Advisory

CVE-2018-19793

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-12-03 06:00:00

Last updated 2024-08-05 11:44:20

Assigner mitre

State PUBLISHED

Description

jiacrontab 1.4.5 allows remote attackers to execute arbitrary commands via the crontab/task/edit?addr=localhost%3a20001 command and args parameters, as demonstrated by command=cat&args=/etc/passwd in the POST data.

← Browse all CVEs View on cve.org ↗