Junglewise Threat Intelligence

CVE-2018-18548: PYSEC-2018-107 - ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.

CVE-2018-18548 · Severity: low · CVSS 3 · Published 2018-10-24

Technologies: ajenti (PyPI). Vendors: PyPI.

Executive brief

ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.

Affected products

PyPI ajenti

Related threats

PYSEC-2014-99 - Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allo
PYSEC-2014-98 - Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated