CVE-2023-5839

Privilege Chaining in hestiacp/hestiacp

Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.

Affected

hestiacp · hestiacp/hestiacp

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0 HUNTR

8.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.29% chance of exploitation in the next 30 days, 20th percentile

Published

2023-10-29

Updated

2024-09-06

Proof-of-concept exploits (1)

• https://huntr.com/bounties/21125f12-64a0-42a3-b218-26b9945a5bc0

Security advisories

• hestiacp/hestiacp/commit/acb766e1db53de70534524b3fbc2270689112630

References

• CVE Record
• NVD entry