Description
Hestia Control Panel 1.3.2 contains an arbitrary file write vulnerability that allows authenticated attackers to write files to arbitrary locations using the API index.php endpoint. Attackers can exploit the v-make-tmp-file command to write SSH keys or other content to specific file paths on the server.
Problem types
External Control of File Name or Path
Product status
Credits
Numan Türle
References
www.exploit-db.com/exploits/49667 (ExploitDB-49667)
hestiacp.com/ (Hestia Control Panel Official Homepage)
github.com/hestiacp/hestiacp (Hestia Control Panel GitHub Repository)
www.vulncheck.com/...stia-control-panel-arbitrary-file-write (VulnCheck Advisory: Hestia Control Panel 1.3.2 - Arbitrary File Write)