Vulnerability CVE-2022-28888


Published: 2022-07-13

Description:
Spryker Commerce OS 1.4.2 allows Remote Command Execution.

See advisories in our WLB2 database:
Topic
Author
Date
High
Spryker Commerce OS Remote Command Execution
David Brown
20.07.2022

Type:

CWE-78

(Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') )

 References:
https://schutzwerk.com
https://www.schutzwerk.com/en/43/advisories/schutzwerk-sa-2022-003/

Copyright 2024, cxsecurity.com

 

Back to Top