Description
The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2024.MS4 | 2024.MS4 |