CVE-2022-44877

CRITICAL · 9.5 CVSS Gepubliceerd: 17-01-2023 CWE-78

Beschrijving

CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.

Required action: Apply updates per vendor instructions.

Vendors

Cwp

Affected products

Control Web Panel

References

control-webpanel.com
nvd.nist.gov