1 matches found
CVE-2024-8504: Improper Neutralization of Special Elements used in an OS Command
An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective...
8.8CVSS8.4AI score0.76217EPSS
SaveExploits7References1
20