Code injection

2021-08-3103:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.3%

JSON

The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type parameter to System.

CPENameOperatorVersion
zentaoeq12.5.3

CPE	Name	Operator	Version
	zentao	eq	12.5.3

References

privasec.com/blog/zentao-cms-a-monkeys-journey-to-priv-esc-remote-code-execution/