An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-01-26T00:00:00
Updated: 2024-08-02T17:39:12.287Z
Reserved: 2023-07-14T00:00:00
Link: CVE-2023-38323
Vulnrichment
No data.
NVD
Status : Modified
Published: 2024-01-26T05:15:12.130
Modified: 2024-11-21T08:13:19.990
Link: CVE-2023-38323
Redhat
No data.