GHSA-pqv9-66jx-6q5v
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: September 30, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.