Threats tagged 'ghsa-4gh4-j9hh-74h5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.5	CVE-2025-50121CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Critical9.52025-07-11GCVE DatabaseCVE-2025-50121 CVE-2025-50121 is a critical OS Command Injection vulnerability (CWE-78) that allows unauthenticated remote code execution via the web interface when HTTP is enabled. HTTP is disabled by default, reducing exposure. The vulnerability arises from improper neutralization of special elements in OS commands triggered by creating a malicious folder over the web interface. Report on CVE-2025-50121 Vulnerability CWE-78 #ghsa-4gh4-j9hh-74h5	GCVE Database	2025-07-11

Page 1 of 1