Threats tagged 'ghsa-g97h-5cpj-9wj2'

A command injection vulnerability exists in the Node.js web service on Versa Operating System (VOS) appliances used for URL-based Zero Touch Provisioning (ZTP). The /authenticate endpoint improperly sanitizes user input, allowing an unauthenticated attacker to inject newline characters in the username field and execute arbitrary shell commands as the versa OS service user. Exploitation requires only a CSRF token obtainable from an unauthenticated page. The vulnerability is mitigated by disabling the Node.js web service after provisioning, as recommended by Versa's security hardening guide.