← CVE Intelligence

CVE-2019-17096

Bitdefender BOX 2 bootstrap get_image_size command injection vulnerability PUBLISHED

Description (CNA)

A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.

Affected (CNA)

Vendor / productVersions
Bitdefender / Bitdefender BOX 2affected 2.1.47.42 before 2.1.59-12; affected 2.1.53.45 before 2.1.59-12

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.