CVE-2018-5955
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
68Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 82%
from disclosure to weaponsame day
Published on NVDJan 21
1st PoCJan 15
metasploitJan 15
An issue was discovered in GitStack through 2.3.10. User controlled input is not sufficiently filtered, allowing an unauthenticated attacker to add a user to the server via the username and password fields to the rest/user/ URI.
Affected products
n/a · n/apublic PoCs found — 6✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44356exploitdbwww.exploit-db.com/exploits/44044unverifiedgithubgithub.com/YagamiiLight/Cerberus★ 640githubgithub.com/MikeTheHash/CVE-2018-5955★ 10githubgithub.com/QianliZLP/GitStackRCE★ 0cve_referencewww.exploit-db.com/exploits/44356/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.