CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
概要
OpenSTAManager has an OS Command Injection in P7M File Processing
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov