OS Command Injection Vulnerability in Roxy-WI by Roxy-WI Team
CVE-2024-13129
Currently unrated
What is CVE-2024-13129?
An OS command injection vulnerability has been identified in Roxy-WI versions up to 8.1.3. The issue resides in the action_service function located in the roxy.py file. Malicious manipulation of the action/service argument can be exploited for remote code execution. The security flaw poses a significant risk, as it has been publicly disclosed and may be leveraged by attackers. Users are strongly encouraged to upgrade to version 8.1.4, which contains a patch specifically addressing this vulnerability.