CVE-2021-4313: Nethserver-Phonenehome Project Nethserver-Phonenehome

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function get_info/get_country_coor of the file server/index.php. The manipulation leads to sql injection. The identifier of the patch is 759c30b0ddd7d493836bbdf695cf71624b377391. It is recommended to apply a patch to fix this issue. The identifier VDB-218393 was assigned to this vulnerability.

Affected products

• Nethserver-Phonenehome Project Nethserver-Phonenehome: before 2021-09-28 (fixed in 2021-09-28)

Published 2023-01-16. Last modified 2026-06-17.