Remote Code Execution (RCE)

aliyundrivewebdav is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient input validation and sanitization of the sid parameter of the actionqueryqrcode component, which allows attackers to execute arbitrary code...