Threats tagged 'ghsa-8hcw-9fqg-x86g'

An OS command injection vulnerability exists in the openmediavault-md plugin of OpenMediaVault version 8.0.4-1. This flaw allows unauthenticated attackers to execute arbitrary commands with root privileges by injecting shell metacharacters. The vulnerability is critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.