GHSA-6ggc-x6gh-4w9h
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: June 28, 2025 6:27 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.