Vulnerability Details CVE-2024-26260
The functionality for synchronization in HGiga OAKlouds' certain moudules has an OS Command Injection vulnerability, allowing remote attackers to inject system commands within specific request parameters. This enables the execution of arbitrary code on the remote server without permission.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 82.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2024-26260
-
cpe:2.3:a:hgiga:oaklouds-organization-2.0:-
-
cpe:2.3:a:hgiga:oaklouds-organization-3.0:-
-
cpe:2.3:a:hgiga:oaklouds-webbase-2.0:-
-
cpe:2.3:a:hgiga:oaklouds-webbase-3.0:-