Description
Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the local HTTP server due to un-sanitized call to the python os.system library.
Unscored
CVE-2021-36667
EUVD-2021-23263GHSA-gjvp-gq3c-wh68
Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the …
Published Jul 11, 2022 · Updated Jul 9, 2026 · Assigned by mitre