CVE-2025-69212
OpenSTAManager has an OS Command Injection in P7M File Processing
Résumé
OpenSTAManager has an OS Command Injection in P7M File Processing
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov