OS Command Injection Vulnerability in AAPanel by AAPanel
CVE-2024-42922

6.5MEDIUM

Key Information:

Vendor

AAPanel

Status
AAPanel
Vendor
CVE Published:
21 May 2025

What is CVE-2024-42922?

AAPanel v7.0.7 has been identified with a vulnerability that allows an attacker to execute arbitrary operating system commands. This issue arises due to improper validation of user input, which could enable unauthorized users to manipulate the system environment. Threat actors leveraging this vulnerability could execute tasks that compromise system integrity and security. It is crucial for users of AAPanel to promptly update to prevent exploitation.

References

https://gist.github.com/mstfsec/c4c05ddfb1cf8779422ff7805...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.