KaliFast Project Management Platform ei_git_repo_url OS Command Injection

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arbitrary commands on the KaliFast server with www-data privileges. Fixed in version 2026061802.

Üreticinin çözüm notu (İngilizce)

Upgrade Kalifast to 2026061802

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• advisories.orangecyberdefense.com/advisories/166 Üçüncü taraf

Kayıt geçmişi

1. 28 Eki 2026 14:09Yayımlandı

İlgili açıklar

• 9,6 CVE-2026-115904Topluyo Desktop for Linux has an OS Command Injection issue
• 9,1 CVE-2026-67074HCL BigFix AEX is affected by multiple security vulnerabilities.
• 9,8 CVE-2026-114278Unauthenticated Command Injection via kubeconfig Username in che-machine-exec
• 7,2 CVE-2026-110541Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug…
• 7,2 CVE-2026-86379Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versio…
• 7,2 CVE-2026-86394Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug…