Hestiacp

hestiacp

Vendor: Hestiacp • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4517 1Hestiacp 1Hestiacp Jun 17, 2026 Oct 13, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository hestiacp/hestiacp prior to 1.8.6.
CVE-2023-5084 1Hestiacp 1Hestiacp Jun 17, 2026 Sep 20, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.8.8.
CVE-2021-30070 1Hestiacp 1Hestiacp Jun 17, 2026 Aug 18, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's packag...Show more An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager.Show less