cbcvebase.

Icewhaletech Casaos-Gateway vulnerabilities

1 known vulnerability affecting icewhaletech/casaos-gateway.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-37265P2CRITICALCVSS 9.8PoCfixed in 0.4.42023-07-17
CVE-2023-37265 [CRITICAL] CWE-306 CVE-2023-37265: CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification an unauthen CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification an unauthenticated attackers can execute arbitrary commands as `root` on CasaOS instances. The problem was addressed by improving the detection of client IP addresses in `391dd7f`. This patch is part of CasaOS 0.4.4. Users should upgrade to CasaOS 0.4.4. If th
nvd
Icewhaletech Casaos-Gateway vulnerabilities | cvebase