critical9.8
CVE-2020-20294
An issue was found in CMSWing project version 1.3.8.
Impact
An issue was found in CMSWing project version 1.3.8. Because the log function does not check the log parameter, malicious parameters can execute arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmswing | Cmswing | Version 1.3.8 |