Unscored CVE-2022-26481 EUVD-2022-31039GHSA-g9h8-9vfq-8gq5

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (…

Published Jul 17, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (CSR) action.

References

https://www.poly.com/us/en/support/security-center
https://sec-consult.com/vulnerability-lab/advisory/authenticated-command-injection-in-poly-studio/