CVE-2021-30070
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being t…
Published: 2022-08-18 · CVSS: Unscored
An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7