CyberRota Analysis
AI-GeneratedHortusFox-Web versions prior to 6.1 are vulnerable to a remote code execution flaw that allows authenticated administrators to execute arbitrary OS commands through the Import/Export functionality. This vulnerability can be exploited by attackers to deploy and run malicious code on the application server, posing a significant risk to system integrity and data security. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server user by abusing the Import/Export functionality. Attackers can leverage the Import/Export feature, which is intended solely for data portability, to deploy and execute malicious code on the underlying application server host.