CVE-2022-45462: Improper Neutralization of Special Elements used in a Command ('Command Injection')

November 23, 2022 (updated March 7, 2023)

Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher

References

www.openwall.com/lists/oss-security/2022/11/23/1
lists.apache.org/thread/2f126y32bf1v3mvxkdgt2jr5j3l1t01w
nvd.nist.gov/vuln/detail/CVE-2022-45462

Code Behaviors & Features

Detect and mitigate CVE-2022-45462 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →