Vulnerabilities > Ironmansoftware > Powershell Universal > 3.9.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-11-23 | CVE-2023-49213 | Command Injection vulnerability in Ironmansoftware Powershell Universal The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due to invalid sanitization of input strings. | 8.8 |