CVE-2024-5672

Impact

A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• http://seclists.org/fulldisclosure/2024/Jul/6
• https://cert.vde.com/en/advisories/VDE-2024-030
• https://cert.vde.com/en/advisories/VDE-2024-032
• http://seclists.org/fulldisclosure/2024/Jul/6
• https://cert.vde.com/en/advisories/VDE-2024-030
• https://cert.vde.com/en/advisories/VDE-2024-032