Description
Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert names
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CoolerControl | coolercontrold | 3.1.0 – < 4.0.0 | 4.0.0 |