CVE-2024-58287
reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
Summary
reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
Original description
The description as published by the source.
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web rengine.wiki