High · 8.8 CVE-2021-3855 EUVD-2021-27095GHSA-7rgr-cw7h-qwmq

Command Injection in Liman Central Management System

Published Feb 24, 2023 · Updated May 18, 2026 · Assigned by TR-CERT

Vendor: Liman Central Management System Product: Liman Central Management System

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Liman Central Management System Liman MYS (HTTP/Controllers, CronMail, Jobs modules) allows Command Injection.

This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462.

Affected products

Vendor	Product	Affected	Fixed
Liman Central Management System	Liman Central Management System	1.7.0 – < 1.8.3-462	1.8.3-462

References

https://docs.liman.dev/baslangic/guvenlik release-notes
https://www.usom.gov.tr/bildirim/tr-23-0109 government-resource broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0109 government-resource