Description

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.

Remediation

References

https://github.com/electerm/electerm/issues/1686

Related Vulnerabilities

CVE-2023-32070 Vulnerability in maven package org.xwiki.rendering:xwiki-rendering-syntax-xhtml

CVE-2023-33544 Vulnerability in maven package io.hawt:hawtio-system

CVE-2022-45386 Vulnerability in maven package org.jenkins-ci.plugins:violations

CVE-2013-3300 Vulnerability in maven package net.liftweb:lift-json_2.9.1

CVE-2022-36902 Vulnerability in maven package com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Patch Third Party Advisory NVD-CWE-noinfo