Vendor
pymedusa
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.3
OS Command Injection via GIT_PATH in pymedusa
pymedusa is an automatic video library manager for TV Shows. In versions prior 1.0.12 an attacker with access to the web interface can update the git executable path in /config/general/ > advanced settings with arbitrary OS commands. An attacker may exploit t…