CVE-2019-12792 - A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root

Back Back to CVE browser

HIGH

A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root

Published Aug 15, 2019

8.8

HIGH

CVSS 3.0

EPSS 4.86%

Description

A command injection vulnerability in UploadHandler.php in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://cardaci.xyz/advisories/2019/08/12/vesta-control-panel-0.9.8-24-privilege-escalation-in-the-upload-handler/
x_refsource_MISCExploitThird Party Advisory
https://github.com/serghey-rodin/vesta/issues/1921
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
https://cardaci.xyz/advisories/2019/08/12/vesta-control-panel-0.9.8-24-privilege-escalation-in-the-upload-handler/		x_refsource_MISCExploitThird Party Advisory
https://github.com/serghey-rodin/vesta/issues/1921		x_refsource_CONFIRMThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 15, 2019

Updated Aug 4, 2024

Reserved Jun 10, 2019

Link CVE-2019-12792

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-12792

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-12792