Description
The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact and attack vectors.
References
- http://gallery.menalto.com/gallery_2.2.4_released
- GLSA-200802-04 vendor-advisory
- 41668 vdb-entry
- 28898 third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=203217