An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing attackers that have direct or indirect access to this file to execute arbitrary OS commands.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-01-26T00:00:00

Updated: 2024-08-02T17:39:12.287Z

Reserved: 2023-07-14T00:00:00

Link: CVE-2023-38323

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2024-01-26T05:15:12.130

Modified: 2024-11-21T08:13:19.990

Link: CVE-2023-38323

cve-icon Redhat

No data.