Security Advisory

CVE-2023-42405

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-14 00:00:00
Last updated 2024-09-25 18:23:07
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskService.list(), bareMetalService.list(), and switchService.list().