github.com
https://github.com/OpenGamePanel/OGP-Website/pull/561 CVE-2021-37158
HIGH
Open Game Panel - Remote Code Execution (RCE) (Authenticated)
Record summary
CVE-2021-37158 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. An authenticated attacker could inject OS commands by starting a Counter-Strike server and using the map field to enter a Bash command.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOpen Game Panel - Remote Code Execution (RCE) (Authenticated)ExploitDB exploitby preyNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-37158 exploit-db.com
https://www.exploit-db.com/exploits/50373