FreeCAD ODA Command Injection Vulnerability

FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports finite element method building information modeling software. FreeCAD version 0.19 is vulnerable to a command injection vulnerability that originates from improper cleanup when invoking the ODA file converter. An attacker could exploit this vulnerability to inject operating system commands via crafted filenames.