CVE-2021-28379 | BDVDB-2026-150499 Detail

Description#

web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355
http://packetstormsecurity.com/files/161836/VestaCP-0.9.8-Cross-Site-Request-Forgery.html

Exploit#

No public exploit known

History#

Version 12021-03-15Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.