CVE-2023-49102

NZBGet 21.1 is affected by an authenticated remote code execution vulnerability. The root cause is that the unarchive helpers 7za and unrar preserve executable permissions, allowing an attacker with Control privileges to execute a file by setting SevenZipCommand or UnrarCmd. This issue impacts pr...