MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite.
References
Link | Resource |
---|---|
https://minetime.ai | Product |
https://github.com/theart42/cves/blob/master/cve-2020-24364/CVE-2020-24364.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2020-08-24 12:15
Updated : 2020-08-31 10:43
NVD link : CVE-2020-24364
Mitre link : CVE-2020-24364
JSON object : View
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Products Affected
ethz
- minetime