TI-2024-18641 CVE-2024-28048 · GHSA-hjpq-vr77-qp94OS command injection in Fortunefield ffBullPriority MEDIUM 51OS command injection vulnerability exists in ffBull ver.4.11, which may allow a remote unauthenticated attacker to execute an arbitrary OS command with the privilege of the running web server.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01273 · Published 2024-03-26 · No fix listed CWE-78