The vulnerability in the web interface of the Exhibitor service for managing ZooKeeper instances allows a attacker to execute arbitrary commands.

The vulnerability of the Exhibitor web interface for managing ZooKeeper instances exists due to the failure to eliminate special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with privileges...