FOGProject Vulnerabilities and Affected Products
Vulnerabilities associated with FOG.
Products
Clear product- fogproject18 vulnerabilities
- FOG1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-39914CRITICAL | FOG has a command injection in /fog/management/export.php?filename=FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.34, packages/web/lib/fog/reportmaker.class.php in FOG was affected by a command injection via the filename parameter to /fog/management/export.php. This vulnerability is fixed in 1.5.10.34. | CVSS9.8v3.1 | EPSS23.2% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |