← CVE Intelligence

CVE-2025-4678

Remote Code Execution leads to Command Injection PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105.

Affected (CNA)

Vendor / productVersions
Pandora FMS / Pandora ITSMaffected 5.0.105 before 5.0.106

CWE

CWE-77

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.