What’s Vulnerable › Vulnerabilities

CVE-2021-3797: Use of Wrong Operator in String Comparison in hestiacp/hestiacp

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-15 · updated 2026-06-17
• Weakness: CWE-597

Description

hestiacp is vulnerable to Use of Wrong Operator in String Comparison

Affected products

• hestiacp Control Panel: through 1.4.12

References

• https://github.com/hestiacp/hestiacp/commit/fc68baff4f94b59e38316f886d0ce47d337042f7
• https://huntr.dev/bounties/c24fb15c-3c84-45c8-af04-a660f8da388f
• https://github.com/hestiacp/hestiacp/commit/fc68baff4f94b59e38316f886d0ce47d337042f7
• https://huntr.dev/bounties/c24fb15c-3c84-45c8-af04-a660f8da388f

Get alerted when CVE-2021-3797 or the next vulnerability affects your stack