CVE-2024-28748

A remote attacker with high privileges may use a reading file function to inject OS commands...