CVE-2018-17984

Published October 4th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.6

MEDIUM

Affected

PROJECT

Description

An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code execution. This is exploitable by authenticated users who have local filesystem access.

0x09AL/0x09al.github.io

GitHub