CVE-2022-24193

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability...

Command injection

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability...

CasaOS 操作系统命令注入漏洞

CasaOS is a simple, easy-to-use and elegant open source home cloud system. A command injection vulnerability exists in CasaOS versions prior to 0.2.7. The vulnerability stems from the failure of a networked system or product to properly filter special characters, commands, etc. from a user's inpu...

CVE-2022-24193

CasaOS (before v0.2.7) contains a command injection vulnerability in the API handling zerotier join/leave requests. The root cause is unsanitized user input in the component managing zerotier API calls, enabling arbitrary commands. Affected versions are prior to 0.2.7. Impact is command execution...

CVE-2022-24193

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability...

CVE-2022-24193

CasaOS before v0.2.7 was discovered to contain a command injection vulnerability...

PT-2022-16533 · Casaos · Casaos

Name of the Vulnerable Software and Affected Versions: CasaOS versions prior to 0.2.7 Description: The issue is a command injection vulnerability. It can be exploited via the component that handles leave or join zerotier API requests. Recommendations: For versions prior to 0.2.7, update to versio...