CVE-2020-17384 — Cellopoint CelloOS - Remote Command Execution (RCE)
Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remotely execute arbitra…
Published: 2020-08-25 · CVSS: 7.2 · CVSS 3.1
Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With the cookie of the system administrator, attackers can inject and remotely execute arbitrary command to manipulate the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7