Lua apps can be deployed, removed, started, reloaded or...
High severity
Unreviewed
Published
Dec 6, 2024
to the GitHub Advisory Database
•
Updated Dec 6, 2024
Description
Published by the National Vulnerability Database
Dec 6, 2024
Published to the GitHub Advisory Database
Dec 6, 2024
Last updated
Dec 6, 2024
Lua apps can be deployed, removed, started, reloaded or stopped without authorization via
AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write
files or load apps that use all features of the product available to a customer.
References