Runtipi operating system command injection vulnerability

Runtipi – A Personal Home Server for Everyone is an open-source home server developed by Runtipi. Versions of Runtipi 3.7.0 and earlier contained a vulnerability related to operating system command injection. This vulnerability stemmed from improper handling of backup file names, which could allo...