CloudMap 漏洞情报库

严重CVE-2022-311612022/07/15

Roxy-WI - Remote Code Execution

Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Version 6.1.1.0 contains a patch for this issue.

roxy-wiPoC 已收录

CVSS10.0EPSS 84.1%

严重CVE-2022-311372022/07/08

Roxy-WI < 6.1.1.0 - Remote Code Execution

Roxy-WI是用于管理Haproxy、Nginx和Keepalived服务器的Web界面。CVE-2022-31137 中，攻击者可构造恶意请求，在无需登录的情况下执行任意命令，控制服务器。

roxy-wiPoC 已收录EXP 已收录RCE

CVSS9.8EPSS 94.0%

严重CVE-2022-311262022/07/07

Roxy-WI <6.1.1.0 - Remote Code Execution

Roxy-WI before 6.1.1.0 is susceptible to remote code execution. System commands can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file.

roxy-wiPoC 已收录RCE

CVSS9.8EPSS 90.5%

roxy-wi

关联漏洞

Roxy-WI - Remote Code Execution

Roxy-WI < 6.1.1.0 - Remote Code Execution

Roxy-WI <6.1.1.0 - Remote Code Execution