CVE-2021-3317: OS Command Injection
Published Jan 26, 2021
·Updated
KLog Server through 2.4.1 allows authenticated command injection. async.php calls shellexec() on the original value of the source parameter.
Affected Software
1 affected component
Klogserver Klog Server<=2.4.1
Event History
Jan 26, 2021
CVE Published
via MITRE·10:33 PM
Data Sourced
via MITRE·10:33 PM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-3317?
CVE-2021-3317 is classified as a critical vulnerability due to its potential for unauthorized command execution.
2
How do I fix CVE-2021-3317?
To remediate CVE-2021-3317, update KLog Server to a version greater than 2.4.1 that has addressed this command injection issue.
3
What systems are affected by CVE-2021-3317?
CVE-2021-3317 affects KLog Server versions up to and including 2.4.1.
4
What type of vulnerability is CVE-2021-3317?
CVE-2021-3317 is an authenticated command injection vulnerability that allows attackers to execute shell commands.
5
Who can exploit CVE-2021-3317?
Only authenticated users with access to KLog Server can exploit CVE-2021-3317 to perform command injection attacks.