CVE-2013-3632

8.8 highEPSS 57%

The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 57% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-09-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

openmediavault:openmediavault

References

http://osvdb.org/99143
http://www.exploit-db.com/exploits/29323
http://www.securityfocus.com/bid/62873
https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats

Check your stack JSON