| Package | Affected versions | Patched versions |
|---|---|---|
| systeminformation | < 4.26.2 | 4.26.2 |
| systeminformation | < 4.26.2 | 4.26.2 |
command injection vulnerability
Problem was fixed with a shell string sanitation fix. Please upgrade to version >= 4.26.2
If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to is.services(), is.inetChecksite(), si.inetLatency(), si.networkStats(), is.services() and si.processLoad()
Are there any links users can visit to find out more?
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free