writeups.xyz / [CVE-2023-22855] Kardex MLOG - Insecure path join to RCE via SSTI

Submitter : c2a

Date: 7 February 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• SSTI
• Security Code Review

Programs :

• Undisclosed

Authors :

• Patrick Hener (@C1sc01)

Link :
https://hesec.de/posts/cve-2023-22855/