CVE-2024-1297
Loomio 2.22.0 - Code injection
Résumé
Loomio 2.22.0 - Code injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Loomio version 2.22.0 allows executing arbitrary commands on the server.
This is possible because the application is vulnerable to OS Command Injection.
Références
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com