Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2023-30261
Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.537
EPSS Ranking
97.9%
CVSS Severity
CVSS v3 Score
9.8
References
https://eldstal.se/advisories/230329-openwb.html
https://github.com/snaptec/openWB/issues/2672
https://github.com/snaptec/openWB/pull/2673
https://eldstal.se/advisories/230329-openwb.html
https://github.com/snaptec/openWB/issues/2672
https://github.com/snaptec/openWB/pull/2673
Products affected by CVE-2023-30261
Openwb
»
Openwb
»
Version:
1.6
cpe:2.3:a:openwb:openwb:1.6
Openwb
»
Openwb
»
Version:
1.7
cpe:2.3:a:openwb:openwb:1.7
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved