tags:enterprise_appcommand_injectionprogress original link: CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon newsletter link: exploits.club Weekly Newsletter 18
Exploits Club Summary:
These days, it feels like the newsletter wouldnât be complete if there wasnât at-least one unauthenticated command injection. Luckily, Rhino Security Labs has us covered this week, coming in hot with a URL which will pop Flowman from the login page.