Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/ajenti@2
purl pkg:pypi/ajenti@2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2018-1000082

Cross-Site Request Forgery (CSRF) Ajenti contains a CSRF vulnerability in the command execution panel of the tool used to manage … There are no reported fixed by versions.
CVE-2018-1000126

Information Exposure Ajenti contains an Information Disclosure vulnerability that can result in user and system enumeration. There are no reported fixed by versions.
CVE-2018-1000080

Incorrect Permission Assignment for Critical Resource Ajenti contains an Insecure Permissions vulnerability that allows normal users to download arbitrary plugins. There are no reported fixed by versions.
CVE-2018-1000081

Improper Input Validation Ajenti contains an Input Validation vulnerability. An attacker can freeze the server by sending a long string … There are no reported fixed by versions.
CVE-2018-1000083

Path Traversal Ajenti contains an Improper Error Handling vulnerability in Login JSON request that can result in a path traversal. There are no reported fixed by versions.
This package is not known to fix any advisories.