CVE-2024-36360
June 11, 2024, 1:54 p.m.
Tags
Product(s) Impacted
awkblog
- v0.0.1 (commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552) and earlier
awkblog
- v0.0.1
Description
OS command injection vulnerability exists in awkblog v0.0.1 (commit hash:7b761b192d0e0dc3eef0f30630e00ece01c8d552) and earlier. If a remote unauthenticated attacker sends a specially crafted HTTP request, an arbitrary OS command may be executed with the privileges of the affected product on the machine running the product.
Weaknesses
Date
Published: June 11, 2024, 5:15 a.m.
Last Modified: June 11, 2024, 1:54 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
vultures@jpcert.or.jp