OS Command Injection Vulnerability in aops-zeus on Linux

CVE-2024-24899

What is CVE-2024-24899?

An OS Command Injection vulnerability exists in aops-zeus, which is part of the openEuler project. This flaw arises from improper neutralization of special elements used in operating system commands. Attackers may exploit this vulnerability to execute arbitrary commands on systems running vulnerable versions of aops-zeus, specifically from 1.2.0 to 1.4.0. This presents significant risks for users, as it could lead to unauthorized access or manipulation of the affected system.

References