PT-2023-12841 · Unknown · Vagrant.Js
CVE-2022-25962
·
Publicado
2023-01-25
·
Atualizado
2023-08-08
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
vagrant.js versions all
Description
The issue arises from improper input sanitization in the boxAdd function, leading to Command Injection. This allows for potential execution of arbitrary commands.
Recommendations
For all versions, consider disabling the boxAdd function until a patch is available to prevent Command Injection attacks. Restrict access to the boxAdd function to minimize the risk of exploitation.
Exploit
Correção
OS Command Injection
Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Vagrant.Js