Critical Vulnerabilities Uncovered in Open Source CasaOS Cloud SoftwareTwo critical security flaws discovered in the open-source CasaOS personal cloud software could be successfully exploited by attackers to achieve arbitrary code execution and take over susceptible systems.
The vulnerabilities, tracked as CVE-2023-37265 and CVE-2023-37266, both carry a CVSS score of 9.8 out of a maximum of 10.
Sonar security researcher Thomas Chauchefoin, who discovered the bugs,
Source: Critical Vulnerabilities Uncovered in Open Source CasaOS Cloud Software (https://thehackernews.com/2023/10/critical-vulnerabilities-uncovered-in.html)