Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-9441

Linear eMerge e3-Series Forgot Password Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linear eMerge e3-Series

Default version status: unaffected

  • 0 to ≤ 1.00-07affected

References