Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

0Xbad53C

#25081of 53,630
9.8Total CVSS
Vulnerabilities · 1
PT-2024-28728
9.8
2024-07-12
Fog · Fog · CVE-2024-39914
**Name of the Vulnerable Software and Affected Versions** FOG versions prior to 1.5.10.34 **Description** The issue is related to a command injection via the `filename` parameter to the "/fog/management/export.php" API endpoint. This allows for code execution. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For versions prior to 1.5.10.34, update to version 1.5.10.34 to resolve the issue. As a temporary workaround, consider restricting access to the "/fog/management/export.php" API endpoint to minimize the risk of exploitation. Avoid using the `filename` parameter in the affected API endpoint until the issue is resolved.