ScienceLogic SL1 Command Execution Vulnerability (CNVD-2023-66411)

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A command execution vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from dash export failing to properly filter construct command special characters, commands, etc., and can be exploited by an attacker to execute arbitrary commands on the system.