Command Injection Flaw in ScienceLogic SL1 Software

CVE-2022-48581

What is CVE-2022-48581?

A command injection vulnerability has been identified in the 'dash export' feature of ScienceLogic SL1. This vulnerability arises from the lack of proper input sanitization, which allows attackers to submit malicious input that is executed as a command on the underlying operating system. As a result, unauthorized users can manipulate system commands, potentially leading to severe security breaches within the affected system.

References