QuantaStor alertConfigSet smtpPassword command injection

Authenticated JSON-RPC alertConfigSet writes an unsanitized smtpPassword into the root qsservice alert email shell command; alertRaise triggers execution as root delayed async dispatch. !/usr/bin/env python3 -- coding: utf-8 -- """OSNexus QuantaStor alertConfigSet smtpPassword command injection...