Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.
Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 67.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 67.00 |
VPI formula vpi-v1