Description
In ThreatQuotient ThreatQ before 5.29.3, authenticated users are able to execute arbitrary commands by sending a crafted request to an API endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThreatQuotient | ThreatQ | < 5.29.3 | 5.29.3 |
Advisories 1
- ICSA-24-352-01 ThreatQuotient ThreatQ Platform CISA ICS & IT advisories · Dec 17, 2024