Mako Server vulnerabilities
1 known vulnerability in Mako Server from Real Time Logic. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest first
- 9.3 Critical severity
Mako Server: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial interface provided by the examples/save.lsp endpoint. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.exec