Description
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.
Remediation
References
https://github.com/electerm/electerm/issues/1686
Related Vulnerabilities
CVE-2016-10551 Vulnerability in npm package waterline-sequel
CVE-2023-41037 Vulnerability in maven package org.webjars.npm:github-com-openpgpjs-openpgpjs
CVE-2020-28490 Vulnerability in npm package async-git
CVE-2008-6681 Vulnerability in maven package org.dojotoolkit:dojo
CVE-2017-12629 Vulnerability in maven package org.apache.lucene:lucene-queryparser