CVE-2024-0325lowCWE-94

Command Injection in Helix Sync

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.6epss 0.8%

exploitation probability

0.8%top 47% of all CVEs

observed exploitation

nono source reports it

In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins.

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

References