CVE-2022-37425 — The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, result…

CVE-2022-37425

The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack. PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in OpenNebula OpenNebula core on Linux allows Remote Code Inclusion.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/

ADP enrichment

CVE

No English description supplied.

https://opennebula.io/opennebula-6-4-2-ee-lts-maintenance-release-is-available/