CasaOS vulnerabilities

2 known vulnerabilities in CasaOS from IceWhaleTech. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CasaOS: Improper Neutralization of Special Elements used in a Command

  CVE-2023-37469Aug 24, 2023IceWhaleTechEPSS 1.58%

  CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.

• 9.8 Critical severity

  CasaOS: Improper Authentication

  CVE-2023-37266Jul 17, 2023IceWhaleTechEPSS 6.84%

  CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features that usually require authentication and execute arbitrary commands as `root` on CasaOS instances. This problem was addressed by improving the