CacheGuard config import eval injection RCE

Admin login and multipart upload to /gui/conf-load-save.apl injects $cmd into config; transaction commit eval executes as admin. !/usr/bin/env python3 -- coding: utf-8 -- """CacheGuard authenticated config import eval injection RCE.""" from future import annotations import re from urllib.parse...