Threats tagged 'ghsa-gx6v-qc65-9v5x'

JD Cloud JDCOS version 4.5.1.r4518 contains a command injection vulnerability in the set_iptv_info function of the /jdcap service interface. This flaw allows remote attackers with limited privileges to manipulate the 'vid' argument to execute arbitrary commands. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit code is available. The vendor has not responded to disclosure attempts and no patch information is currently available.