TI-2024-03690 CVE-2024-3955 · GHSA-4f92-w438-f484Arbitrary code execution in CraftBeerPi 4Priority MEDIUM 51URL GET parameter "logtime" utilized within the "downloadlog" function from "cbpi/http_endpoints/http_system.py" is subsequently passed to the "os.system" function in "cbpi/controller/system_controller.py" without prior…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01149 · Published 2024-05-02 · Fixed in 4.4.1.a1 (commit 57572c7), 4.4.1.a1 CWE-94
