Icewhale Casaos-Gateway vulnerabilities

1 known vulnerability affecting icewhale/casaos-gateway.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2023-37265CRITICALCVSS 9.8PoCfixed in 0.4.4v0.4.42023-07-17

CVE-2023-37265 [CRITICAL] CWE-306 CVE-2023-37265: CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification an unauthen CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification an unauthenticated attackers can execute arbitrary commands as `root` on CasaOS instances. The problem was addressed by improving the detection of client IP addresses in `391dd7f`. This patch is part of CasaOS 0.4.4. Users should upgrade to CasaOS 0.4.4. If th