MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite.
References
Link | Resource |
---|---|
https://github.com/theart42/cves/blob/master/cve-2020-24364/CVE-2020-24364.md | Exploit Third Party Advisory |
https://minetime.ai | Product |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-08-24T18:35:53
Updated: 2020-08-25T15:30:29
Reserved: 2020-08-17T00:00:00
Link: CVE-2020-24364
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-08-24T19:15:10.557
Modified: 2020-08-31T17:43:41.327
Link: CVE-2020-24364
JSON object: View
Redhat Information
No data.
CWE