CVE-2024-5672

Description

A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command.

Affected Platforms

Weakness Type

CWE-78

References

• http://seclists.org/fulldisclosure/2024/Jul/6
• https://cert.vde.com/en/advisories/VDE-2024-030
• https://cert.vde.com/en/advisories/VDE-2024-032
• http://seclists.org/fulldisclosure/2024/Jul/6
• https://cert.vde.com/en/advisories/VDE-2024-030
• https://cert.vde.com/en/advisories/VDE-2024-032