GHSA-92vc-4fcw-g68qCriticalCVSS 8.8

CasaOS Command Injection vulnerability

Published
August 5, 2024
Last Modified
November 18, 2024

🔗 CVE IDs covered (1)

CVE-2023-37469 →

📋 Description

CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.

🎯 Affected products1

  • go/github.com/IceWhaleTech/CasaOS:< 0.4.4

🔗 References (8)