An issue in alist-tvbox v1.7.1 allows a remote attacker to execute arbitrary code via the /atv-cli file.

Published Nov 21, 2024 · Updated Nov 26, 2024 · Assigned by mitre