Command Injection Vulnerability in ScienceLogic SL1

CVE-2022-48582

What is CVE-2022-48582?

A command injection vulnerability exists within the ticket report generation feature of ScienceLogic SL1. This vulnerability occurs due to the handling of unsanitized user input, which is directly fed into a shell command. Consequently, attackers can exploit this flaw to execute arbitrary commands on the underlying operating system, posing significant security risks. It's crucial for users of ScienceLogic SL1 to implement security measures and patches to mitigate potential exploitation.

References