CVE-2025-24345

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request.

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a crafted HTTP request.

Una vulnerabilidad en la funcionalidad “Hosts” de la aplicación web de ctrlX OS permite a un atacante remoto autenticado (con privilegios bajos) manipular el archivo “hosts” de manera no intencionada a través de una solicitud HTTP manipulada.