CVE-2024-58287
reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
概要
reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web rengine.wiki