PT-2018-14507 · Vesta · Vesta Control Panel

Numan Ozdemir · Published 2018-10-24 · Updated 2018-12-04 · CVE-2018-18547

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Vesta Control Panel versions prior to 0.9.8-22

Description The issue allows for XSS attacks through various parameters, including the domain parameter in the "edit/web/" endpoint, the backup parameter in the "list/backup/" endpoint, the period parameter in the "list/rrd/" endpoint, the dir a parameter in the "list/directory/" endpoint, or the filename to the "list/directory/" URI.

Recommendations For Vesta Control Panel versions prior to 0.9.8-22, consider updating to a version that addresses this issue. As a temporary workaround, restrict access to the affected endpoints, such as "edit/web/", "list/backup/", "list/rrd/", and "list/directory/", to minimize the risk of exploitation. Avoid using the vulnerable parameters, such as domain, backup, period, dir a, and filename, in the affected endpoints until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-18547

Affected Products

Vesta Control Panel

References · 4

• 🔥 https://numanozdemir.com/vesta-vulns.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/149897/VestaCP-0.9.8-22-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-18547 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18547 · Security Note