Critical severity9.8NVD Advisory· Published Mar 6, 2022· Updated Jun 17, 2026
CVE-2021-46704
CVE-2021-46704
Description
In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
genieacsnpm | < 1.2.8 | 1.2.8 |
Affected products
3Patches
Vulnerability mechanics
References
4- github.com/genieacs/genieacs/commit/7f295beeecc1c1f14308a93c82413bb334045af6nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-2877-693q-pj33ghsaADVISORY
- github.com/genieacs/genieacs/releases/tag/v1.2.8nvdRelease NotesThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2021-46704ghsaADVISORY
News mentions
0No linked articles in our index yet.