Privilege Chaining in hestiacp/hestiacp
CVE-2023-5839

8.8HIGH

Key Information:

Vendor

Hestiacp

Status
Hestiacp/hestiacp
Vendor
CVE Published:
29 October 2023

What is CVE-2023-5839?

A privilege chaining issue has been identified in the HestiaCP version prior to 1.8.9, which may allow unauthorized users to escalate their access level, potentially leading to unauthorized modifications and breaches. This vulnerability highlights the importance of updating to the latest version to ensure system integrity and security.

Affected Version(s)

hestiacp/hestiacp < 1.8.9

References

https://huntr.com/bounties/21125f12-64a0-42a3-b218-26b994...
https://github.com/hestiacp/hestiacp/commit/acb766e1db53d...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.