CVE-2021-37158

Name of the Vulnerable Software and Affected Versions OpenGamePanel OGP-Agent-Linux versions through 2021-08-14

Description An issue was discovered that allows an authenticated attacker to inject OS commands. This can be achieved by starting a Counter-Strike server and using the map field to enter a Bash command.

Recommendations For OpenGamePanel OGP-Agent-Linux versions through 2021-08-14, consider restricting access to the map field when starting a Counter-Strike server to minimize the risk of OS command injection until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.