CVE-2021-30070

—

CVSS 3.1

7.5 high

EPSS

<1%p53

Published

Aug 18, 2022 (Aug 18, 2022)

Modified

Jun 17, 2026

Description

An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.

Vendors: hestiacp
Products: hestiacp
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.