WS-2023-0058

Unauthenticated OS Command Injection in stamparm/maltrail exists in stamparm/maltrail prior to 0.55. The subprocess.checkoutput function in mailtrail/core/http.py contains a command injection vulnerability in the params.get"username"parameter. An attacker can exploit this vulnerability by injecti...