Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-28135

A low privileged remote attacker can use a command injection vulnerability in the API which performs remote code execution as the user-app user due to improper input validation. The confidentiality is partly affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.7%
CVSS Severity
CVSS v3 Score 5.0
Products affected by CVE-2024-28135


Contact Us

Shodan ® - All rights reserved