aliyundrive-webdav vulnerabilities
1 known vulnerability in aliyundrive-webdav from Messense. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
aliyundrive-webdav: Improper Neutralization of Special Elements used in an OS Command
An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the action_query_qrcode component.