Security Advisory

CVE-2024-1297

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-19 23:41:47
Last updated 2026-04-20 14:00:52
Assigner Fluid Attacks
State PUBLISHED

Description

Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to OS Command Injection.