apache virtual-computing-lab CVE-2018-11773 is a vulnerability in Apache Virtual Computing Lab
Published on July 29, 2019

Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitted block allocation. The form data is then used as an argument to the php built in function strtotime. This allows for an attack against the underlying implementation of that function. The implementation of strtotime at the time the issue was discovered appeared to be resistant to a malicious attack. However, all VCL systems running versions earlier than 2.5.1 should be upgraded or patched. This vulnerability was found and reported to the Apache VCL project by ADLab of Venustech.

NVD


Products Associated with CVE-2018-11773

Want to know whenever a new CVE is published for Apache Virtual Computing Lab? stack.watch will email you.

Apache Virtual Computing Lab
 

Affected Versions

Apache VCL Version 2.1 through 2.5 is affected by CVE-2018-11773

Exploit Probability

EPSS
0.88%
Percentile
75.05%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.