Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-5407

Code Injection vulnerability in RhinOS from SaltOS

Description

A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SaltOS RhinOS

Default version status: unaffected

  • 3.0-1190affected

References