CVE-2024-1297
Loomio 2.22.0 - Code injection
Summary
Loomio 2.22.0 - Code injection
Original description
The description as published by the source.
Loomio version 2.22.0 allows executing arbitrary commands on the server.
This is possible because the application is vulnerable to OS Command Injection.
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com