Threats tagged 'ghsa-rv43-hp4f-hx6x'

Ilevia EVE X1 Server firmware versions up to 4.7.18.0.eden contain a vulnerability in the sync_project.sh script that allows execution with unnecessary privileges, enabling an attacker to escalate privileges to root. The vendor has declined to provide a patch and recommends not exposing port 8080 to the internet to mitigate risk.