Filtered by vendor Hestiacp Subscriptions
Filtered by product Hestiacp Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-5084 1 Hestiacp 1 Hestiacp 2024-02-01 6.1 Medium
Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.
CVE-2023-4517 1 Hestiacp 1 Hestiacp 2023-10-17 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.
CVE-2021-30070 1 Hestiacp 1 Hestiacp 2022-08-19 7.5 High
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.