3 matches found
CVE-2019-16293
The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field.
CVE-2020-11941
An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery.
CVE-2020-11943
An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload.