CVE-2021-3317: Klogserver Klog Server

High severity, CVSS 8.8. EPSS: 41.4% chance of exploitation in the next 30 days.

KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter.

Affected products

• Klogserver Klog Server: up to and including 2.4.1

Published 2021-01-26. Last modified 2026-06-17.