Podatność CVE-2024-28764


Publikacja: 2024-05-01

Opis:
IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection. An attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 285623.

Typ:

CWE-1236

 Referencje:
https://www.ibm.com/support/pages/node/7149857
https://exchange.xforce.ibmcloud.com/vulnerabilities/285623

Copyright 2024, cxsecurity.com

 

Back to Top