CVE-2021-22935

Publication date

2021-08-16 18:38:49

Family

hackerone

State

PUBLISHED

Description

A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.