Threats tagged 'ghsa-54m7-7mmj-vwxc'

reNgine versions up to 2.2.0 and the current master branch at the specified commit are vulnerable to OS Command Injection via the custom_headers scan engine configuration field. This vulnerability affects functions fetch_url and dir_file_fuzz in web/reNgine/tasks.py. It allows an unauthenticated attacker to execute arbitrary OS commands remotely, leading to full system compromise.