CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:ethz:minetime:*:*:*:*:*:*:*:*

Information

Published : 2020-08-24 12:15

Updated : 2020-08-31 10:43


NVD link : CVE-2020-24364

Mitre link : CVE-2020-24364


JSON object : View

CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Advertisement

dedicated server usa

Products Affected

ethz

  • minetime