CVE-2024-41714

A command injection vulnerability exists in the Web Interface component of Mitel MiCollab (through 9.8 SP1/9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) (through 1.0.0.27). The root cause is insufficient parameter sanitization , which could allow an authenticated attacker to ...