Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2023-3991

OS command injection vulnerability in FreshTomato 2023.3

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GovTech CSG

Description

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreshTomato FreshTomato

Default version status: unaffected

  • 2023.3affected

References