CVE-2024-5914
Cortex XSOAR: Command Injection in CommonScripts Pack
Severity
High 7
CVSS 4.0
Exploited
Not listed
EPSS
0.012
66.1th percentile
Discovered by
Third party
Published by the vendor
Published
Aug 14, 2024
Assigned by palo_alto
Description
A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container.
Weakness: CWE-77
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Cortex XSOAR | SIEM & Log Management | cna-assigner |
Vendor-reported affected versions (1)
- Palo Alto Networks · Cortex XSOAR CommonScripts
Credit
Othmar Lechner
Vendor remediation
This issue is fixed in Cortex XSOAR CommonScripts 1.12.33 and all later versions.