Ajenti has potential Remote Code Execution

[ Description ]Official description

Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13.

[ Fixes ]Fixes and patches

• aj 2.2.13Fixed version · GitHub Advisories · pip package aj: upgrade to 2.2.13 or later (affected < 2.2.13)

[ Packages ]Affected open-source packages

• aj pipAffected < 2.2.13 · fixed in 2.2.13 · GHSA-vcw3-r3fx-j444

[ References ]References

• github.com/ajenti/ajenti/security/advisories/GHSA-vcw3-r3fx-j444x_refsource_CONFIRM
• github.com/ajenti/ajenti/releases/tag/v2.2.13x_refsource_MISC