Authentication Bypass

lava is vulnerable to authentication bypass. The vulnerability exists in lavaserver/lavatable.py due to improper input sanitization which allows an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...