Description
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.
Remediation
References
https://github.com/electerm/electerm/issues/1686
Related Vulnerabilities
CVE-2023-29215 Vulnerability in maven package org.apache.linkis:linkis-metadata-query-service-jdbc
CVE-2017-16181 Vulnerability in npm package wintiwebdev
CVE-2021-44667 Vulnerability in maven package com.alibaba.nacos:nacos-common
CVE-2020-17527 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2022-29230 Vulnerability in npm package @shopify/hydrogen