SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution
A template injection vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14 via the ciwweb.pl http://ciwweb.pl/ Perl web application. Exploitation allows an unauthenticated attacker can execute arbitrary commands.
Lighthouse_studioPoC 已收录
CVSS10.0