GeoNode has OS command injection via uploaded file layer name

Arbitrary OS commands can be executed on the GeoNode by uploading a vector file with a crafted layer name...