{"action":"No fix published. Pin and monitor.","affected":[],"component":"librenms/librenms","cve_ids":["CVE-2018-20434"],"ecosystem":"Packagist","epss":0.71487,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-62q7-qj6g-gvr7","id":"tcs_01M5KEWHZ1PTAN4SE31QM2CBXA","modified_at":"2024-04-24T22:28:31.669474Z","published_at":"2022-05-24T16:44:30Z","references":["https://osv.dev/vulnerability/GHSA-62q7-qj6g-gvr7","https://nvd.nist.gov/vuln/detail/CVE-2018-20434","https://drive.google.com/file/d/1LcGmOY8x-TG-wnNr-cM_f854kxk0etva/view?usp=sharing","https://gist.github.com/mhaskar/516df57aafd8c6e3a1d70765075d372d","https://github.com/librenms/librenms","https://shells.systems/librenms-v1-46-remote-code-execution-cve-2018-20434"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-62q7-qj6g-gvr7","url":"https://osv.dev/vulnerability/GHSA-62q7-qj6g-gvr7"}],"summary":"LibreNMS arbitrary OS commands execution"}