CVE-2020-35729

Publication date

2020-12-27 04:40:44

Family

mitre

State

PUBLISHED

Description

KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.