PT-2020-17406

Name of the Vulnerable Software and Affected Versions KLog Server version 2.4.1 Description The issue allows OS command injection via shell metacharacters in the user parameter of the "actions/authenticate.php" API endpoint. Recommendations For KLog Server version 2.4.1, avoid using the user...