CVE:CVE-2023-37265
CNNVD:CNNVD-202307-1465
CasaOS是一个简单、易用、优雅的开源家庭云系统。
CasaOS 0.4.4之前版本存在访问控制错误漏洞，该漏洞源于缺乏验证IP地址。攻击者利用该漏洞可以以root身份执行任意命令。
solution:Upgrade icewhale casaos to a higher version than 0.4.4,0.4.4:alpha1,0.4.4:alpha2,0.4.4:alpha3,0.4.4:alpha4,0.4.4:alpha5,and avoid the version (,0.4.4),0.4.4:alpha1,0.4.4:alpha2,0.4.4:alpha3,0.4.4:alpha4,0.4.4:alpha5; Upgrade icewhale casaos-gateway to a higher version than 0.4.4,0.4.4:alpha1,and avoid the version (,0.4.4),0.4.4:alpha1