PT-2018-13790 · Unknown+1 · Masscan.Py+1

Gsfish · Publicado 2018-09-12 · Atualizado 2018-11-02 · CVE-2018-16951

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions xunfeng version 0.2.0

Description The issue allows command execution via CSRF due to masscan.py mishandling backquote characters.

Recommendations For xunfeng version 0.2.0, consider restricting access to the masscan.py script to minimize the risk of exploitation until a patch is available.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-16951

Produtos afetados

Masscan.Py

Xunfeng

Referências · 3

• 🔥 https://github.com/ysrc/xunfeng/issues/176 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-16951 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-16951 · Aviso do Fabricante