CVE-2021-44079

In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution...

Remote code execution

In the wazuh-slack active response script in Wazuh 4.2.x before 4.2.5, untrusted user agents are passed to a curl command line, potentially resulting in remote code execution...

CVE-2021-44079

The vulnerability CVE-2021-44079 affects Wazuh 4.2.x before 4.2.5, specifically the wazuh-slack active response script. Untrusted user agents are passed to a curl command line, creating a potential remote code execution (RCE) condition. This is a server-side issue arising from input handling in t...