critical9.8
CVE-2023-30261
Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.
Impact
Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openwb | Openwb | Versions 1.6, 1.7 |