CVE-2025-4678

creationtimestamp| type| source ---|---|--- 2025-06-10 17:36:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbglpbjzt2m 2025-06-10 18:33:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17959...

CVE-2025-4678 Remote Code Execution leads to Command Injection

Improper Neutralization of Special Elements in the chromiumpath variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105...

CVE-2025-4678

CVE-2025-4678 affects Pandora ITSM 5.0.105. The root cause is improper neutralization of special elements in the chromium_path variable, which may permit OS command injection. The CVSS data indicates network attack vector, high severity (7.0), with high privileges required and no user interaction...

CVE-2025-4678 Remote Code Execution leads to Command Injection

Improper Neutralization of Special Elements in the chromiumpath variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105...