CVE-2023-38323

An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands...

PT-2024-12711

Name of the Vulnerable Software and Affected Versions OpenNDS versions prior to 10.1.3 Description An issue was discovered in OpenNDS where it fails to sanitize the status path script entry in the configuration file. This allows attackers with direct or indirect access to the configuration file t...