Summary
The Backup module executes some restore hooks that can inject shell metacharacters into the name input and execute arbitrary OS commands on the server.
Authentication with a known ACP username is required.
Common Vulnerabilities and Exposures (CVE)
Requested
GitHub Security Advisory (GHSA)
GHSA-5457-hm39-pcfc
Provider Urgency (choice of: Not Defined, Clear, Green, Amber, or Red)
G - Green
Link to Published GHSA with More Details
Highlights
