Approved changes feed: RSS · Atom

cpe:2.3:a:hestiacp:control_panel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHestiacp (80862109-12b3-55cb-bbc3-b8c5217105f2)
ProductControl Panel (9bfeab1e-1917-5f79-98fc-8bbe88e4ea7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/hestiacp/hestiacp purl2cpe 2026-06-01 10:16:22.238516

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5839 vulnerable 2026-06-08 06:19:44.880481 Privilege Chaining in hestiacp/hestiacp
HIGH (8.8)
Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.
Published: 2023-10-29T00:00:19.041Z
Updated: 2024-09-06T19:32:01.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3479 vulnerable 2026-06-08 06:09:39.708700 Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp
MEDIUM (4.3)
Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.
Published: 2023-06-30T09:55:14.511Z
Updated: 2024-11-06T19:56:50.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2636 vulnerable 2026-06-08 05:43:35.934977 Code Injection in hestiacp/hestiacp
HIGH (8.5)
Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.
Published: 2022-08-05T09:30:16.000Z
Updated: 2024-08-03T00:46:03.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2626 vulnerable 2026-06-08 05:43:35.910697 Incorrect Privilege Assignment in hestiacp/hestiacp
CRITICAL (9.1)
Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6.
Published: 2022-08-05T08:15:16.000Z
Updated: 2024-08-03T00:46:03.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2550 vulnerable 2026-06-08 05:43:35.784013 OS Command Injection in hestiacp/hestiacp
CRITICAL (9.9)
OS Command Injection in GitHub repository hestiacp/hestiacp prior to 1.6.5.
Published: 2022-07-27T14:52:32.000Z
Updated: 2024-08-03T00:39:08.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1509 vulnerable 2026-06-08 05:39:13.327013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0986 vulnerable 2026-06-08 05:39:11.604011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0838 vulnerable 2026-06-08 05:39:11.285218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0753 vulnerable 2026-06-08 05:39:10.764449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0752 vulnerable 2026-06-08 05:39:10.763899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3797 vulnerable 2026-06-08 05:33:54.110743 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-30071 vulnerable 2026-06-08 05:31:46.882485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27231 vulnerable 2026-06-08 05:30:46.152190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10966 vulnerable 2026-06-08 05:16:36.113115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.