CVE-2022-48581

CVE-2022-48581 affects ScienceLogic SL1 via the dash export feature, where unsanitized user input is passed to a shell command, enabling command injection. Affected component is the dash export path in SL1 (ScienceLogic software); underlying cause is unsanitized input reaching the shell. Document...

CVE-2022-48581

A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...