CVE-2023-36622: Improper Neutralization of Special Elements used in an OS Command

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter...