Login Request a demo
SH
Product
Shellinabox
by Shellinabox Project · last CVE Mar 17, 2019
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities2Critical0High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Shellinabox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-16789
7.5
6%
Mar 17
libhttp/url.c in shellinabox through 2.20 has an implementation flaw in the HTTP request parsing logic
Affected: through 2.20
CVE-2015-8400
7.4
2%
Jan 12
The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL
Affected: through 2.18
Showing 2