CVE-2024-58287
reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
Résumé
reNgine 2.2.0 Authenticated Command Injection via Scan Engine Configuration
Description d'origine
La description telle que publiée par la source (souvent en anglais).
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web rengine.wiki