CVE-2023-49102

Published November 22nd, 2023

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve executable file permissions. An attacker with the Control capability can execute a file by setting the value of SevenZipCommand or UnrarCmd. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

nzbget/nzbget

Efficient Usenet Downloader

GitHub

1.28K

linuxserver/nzbget

An Nzbget container, brought to you by LinuxServer.io.

Docker Hub

481809M