CyberSecBulletin

Shrubbery vulnerabilities

We track 1 vulnerability in Shrubbery products across 3 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Shrubbery vulnerabilities

  • 9.8 Critical severity

    tac_plus_2x: Improper Control of Generation of Code

    CVE-2023-48643ShrubberyEPSS 1.17%

    Shrubbery tac_plus 2.x, 3.x. and 4.x through F4.0.4.28 allows unauthenticated Remote Command Execution. The product allows users to configure authorization checks as shell commands through the tac_plus.cfg configuration file. These are executed when a client s