ID: CVE-2024-28135
Published: 2024-05-14T16:16Z
Description: description_data: 
	
		
		
	
	
		
			
				
					

	
		
		
	
	
		


			
				
					A low privileged remote attacker can use a command injection vulnerability in the API which performs
remote code execution as the user-app user due to improper input validation. The confidentiality is partly affected.









				


			


		


	

CWE: problemtype_data: description: CWE-20