Security Advisory
CVE-2019-17096
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.