PyPI/ajenti-panel CVE-2018-1000083: medium 5.3, EPSS 1.55%
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2018-112
- nvd: CVE-2018-1000083
- https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee
- https://pypi.org/project/ajenti-panel
CVE-2018-1000083 · published · modified · JSON