Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/ajenti-panel@2
purl pkg:pypi/ajenti-panel@2
Tags Ghost
Next non-vulnerable version 2.2.15
Latest non-vulnerable version 2.2.15
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2018-1000082

Cross-Site Request Forgery (CSRF) Ajenti contains a CSRF vulnerability in the command execution panel of the tool used to manage …
2.0.34
Vulnerable
CVE-2018-1000126

Information Exposure Ajenti contains an Information Disclosure vulnerability that can result in user and system enumeration.
2.0.34
Vulnerable
CVE-2018-1000080

Incorrect Permission Assignment for Critical Resource Ajenti contains an Insecure Permissions vulnerability that allows normal users to download arbitrary plugins.
2.0.34
Vulnerable
CVE-2018-1000081

Improper Input Validation Ajenti contains an Input Validation vulnerability. An attacker can freeze the server by sending a long string …
2.0.34
Vulnerable
CVE-2018-1000083

Path Traversal Ajenti contains an Improper Error Handling vulnerability in Login JSON request that can result in a path traversal.
2.0.34
Vulnerable
This package is not known to fix any advisories.