Beveiligingsadvies

CVE-2025-24962

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-03 20:58:06
Laatst bijgewerkt 2025-02-12 20:51:26
Toegewezen door GitHub_M
CVSS-score 8.7
Status PUBLISHED

Beschrijving

reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmap_cmd parameters. This issue has been addressed in commit `c28e5c8d` and is expected in the next versioned release. Users are advised to filter user input and monitor the project for a new release.