php-censor Webhook Endpoint GitBuild.php os command injection_CVE-2026-10273

6.9 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was found in php-censor up to 2.1.6. This affects an unknown function of the file src/Model/Build/GitBuild.php of the component Webhook Endpoint. Performing a manipulation of the argument commitId results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named cd68d102601320bd319d590b75f7652e66f0685f. It is recommended to apply a patch to fix this issue.

Basic Information

ID CVE-2026-10273

Source VulDB

Published Jun 1, 2026 at 16:15

Affected Product

Vendor n/a

Product php-censor

Version 2.1.0

Affected Versions n/a php-censor 2.1.0
n/a php-censor 2.1.1
n/a php-censor 2.1.2
n/a php-censor 2.1.3
n/a php-censor 2.1.4
n/a php-censor 2.1.5
n/a php-censor 2.1.6

CWE Classification

CWE-78 CWE-77

References

{
    "lastseen": "",
    "description": "A vulnerability was found in php-censor up to 2.1.6. This affects an unknown function of the file src/Model/Build/GitBuild.php of the component Webhook Endpoint. Performing a manipulation of the argument commitId results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named cd68d102601320bd319d590b75f7652e66f0685f. It is recommended to apply a patch to fix this issue.",
    "published": "2026-06-01T16:15:09.557Z",
    "modified": "2026-06-01T16:15:09.557Z",
    "type": "cve",
    "title": "php-censor Webhook Endpoint GitBuild.php os command injection",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/367552\nhttps://vuldb.com/vuln/367552/cti\nhttps://vuldb.com/cve/CVE-2026-10273\nhttps://vuldb.com/submit/825315\nhttps://github.com/php-censor/php-censor/issues/442\nhttps://github.com/php-censor/php-censor/pull/441\nhttps://github.com/php-censor/php-censor/commit/cd68d102601320bd319d590b75f7652e66f0685f\nhttps://github.com/php-censor/php-censor/",
    "id": "CVE-2026-10273",
    "bulletinFamily": "",
    "cwe": [
        "CWE-78",
        "CWE-77"
    ],
    "cvelist": null,
    "sourceData": "n/a php-censor 2.1.0\nn/a php-censor 2.1.1\nn/a php-censor 2.1.2\nn/a php-censor 2.1.3\nn/a php-censor 2.1.4\nn/a php-censor 2.1.5\nn/a php-censor 2.1.6",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "php-censor",
    "version": "2.1.0",
    "vendor": "n/a",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}