Back

CVE-2024-6917

Aug. 12, 2024, 6:57 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Veribase Order Management

  • before v4.010.2

Source

iletisim@usom.gov.tr

Tags

CWE-78
iletisim@usom.gov.tr
2024-08-12
CVE-2024-6917

CVE-2024-6917 details

Published : Aug. 12, 2024, 3:15 p.m.
Last Modified : Aug. 12, 2024, 6:57 p.m.

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Veribilim Software Veribase Order Management allows OS Command Injection.This issue affects Veribase Order Management: before v4.010.2.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

URL Source
https://www.usom.gov.tr/bildirim/tr-24-1105 iletisim@usom.gov.tr
This website uses the NVD API, but is not approved or certified by it.