CVE-2022-44019

creationtimestamp| type| source ---|---|--- 2022-10-30 06:30:47+00:00| seen| https://t.me/cibsecurity/52273...

CVE-2022-44019

Total.js versions prior to 0e5ace7 are vulnerable to remote command execution via shell metacharacters in the host parameter of the /api/common/ping endpoint. The issue is a command-injection flaw in Total.js 4.x pre-0e5ace7, enabling an attacker to execute arbitrary commands remotely. Affected c...