2 matches found
WS-2019-0242
soletta-dev-app all versions are vulnerable to Command Injection when not validating user input on the /api/service/status API endpoint, passing contents of the service query parameter to an exec call...
9.3CVSS5.8AI score
SaveExploits0References1
PT-2020-21168
Name of the Vulnerable Software and Affected Versions soletta-dev-app versions affected versions not specified Description The issue concerns a lack of validation for user input on the "/api/service/status" API endpoint. Specifically, the contents of the service query parameter are passed to an...
6.4AI score
SaveExploits0References2
20