CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-34025
https://notcve.org/view.php?id=CVE-2022-34025
Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandler.php. Se ha detectado que Vesta versión v1.0.0-5, contiene una vulnerabilidad de tipo cross-site scripting, por medio de la función post en el archivo /web/api/v1/upload/UploadHandler.php. • https://github.com/serghey-rodin/vesta/issues/2252 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-43693
https://notcve.org/view.php?id=CVE-2021-43693
vesta 0.9.8-24 is affected by a file inclusion vulnerability in file web/add/user/index.php. vesta versión 0.9.8-24, está afectado por una vulnerabilidad de inclusión de archivos en el archivo web/add/user/index.php • https://github.com/serghey-rodin/vesta/issues/2052 •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2021-30462
https://notcve.org/view.php?id=CVE-2021-30462
VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts. VestaCP versiones hasta 0.9.8-24, permite al usuario administrador escalar privilegios a root porque la configuración de Sudo no requiere una contraseña para ejecutar los scripts /usr/local/vesta/bin • https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities • CWE-306: Missing Authentication for Critical Function •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2021-30463
https://notcve.org/view.php?id=CVE-2021-30463
VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from user.conf under the /usr/local/vesta/data/users/admin directory, the admin password can be changed via a /reset/?action=confirm&user=admin&code= URI. This occurs because chmod is used unsafely. VestaCP versiones hasta 0.9.8-24, permite a atacantes alcanzar privilegios al crear enlaces simbólicos en archivos para los que carecen de permisos. • https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 8.8EPSS: 3%CPEs: 2EXPL: 2CVE-2021-28379 – VestaCP 0.9.8 - File Upload CSRF
https://notcve.org/view.php?id=CVE-2021-28379
web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin. El archivo web/upload/UploadHandler.php en Vesta Control Panel (también se conoce como VestaCP) versiones hasta 0.9.8-27 y myVesta versiones hasta 0.9.8-26-39, permite cargas desde un origen diferente VestaCP version 0.9.8 suffers from a cross site request forgery that can be leveraged to add remote ssh access. • https://www.exploit-db.com/exploits/49659 http://packetstormsecurity.com/files/161836/VestaCP-0.9.8-Cross-Site-Request-Forgery.html https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355 • CWE-434: Unrestricted Upload of File with Dangerous Type •