Product

Fuxa (< 1.2.11)

1 brief RSS

Frangoteam Fuxa: Remote Command Execution via /api/runscript (CVE-2023-33831)

Frangoteam Fuxa version 1.1.13 contains an unauthenticated remote command execution vulnerability in the /api/runscript endpoint due to improper sanitization of the code parameter.

Fuxa +1 remote-code-execution cve web-application injection scada ics auth-bypass

2r 3t 2c updated 2h ago