PT-2018-14507 · Vesta · Vesta Control Panel

Numan Ozdemir · Publicado 2018-10-24 · Atualizado 2018-12-04 · CVE-2018-18547

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions prior to 0.9.8-22

Description The issue allows for XSS attacks through various parameters, including the domain parameter in the "edit/web/" endpoint, the backup parameter in the "list/backup/" endpoint, the period parameter in the "list/rrd/" endpoint, the dir a parameter in the "list/directory/" endpoint, or the filename to the "list/directory/" URI.

Recommendations For Vesta Control Panel versions prior to 0.9.8-22, consider updating to a version that addresses this issue. As a temporary workaround, restrict access to the affected endpoints, such as "edit/web/", "list/backup/", "list/rrd/", and "list/directory/", to minimize the risk of exploitation. Avoid using the vulnerable parameters, such as domain, backup, period, dir a, and filename, in the affected endpoints until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-18547

Produtos afetados

Vesta Control Panel

Referências · 4

• 🔥 https://numanozdemir.com/vesta-vulns.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/149897/VestaCP-0.9.8-22-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-18547 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18547 · Nota de Segurança