nmap4j 1.1.0 allows attackers to execute arbitrary commands via shell metacharacters in an includeHosts call.

Published Sep 19, 2018 · Updated Sep 16, 2024 · Assigned by mitre