CVE-2023-43449

https://notcve.org/view.php?id=CVE-2023-43449

16 Jan 2024 — An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a crafted request to the service/LicenseService component. Un problema en HummerRisk HummerRisk v.1.10 a 1.4.1 permite que un atacante autenticado ejecute código arbitrario a través de una solicitud manipulada al componente de servicio/LicenseService. • https://github.com/HummerRisk/HummerRisk/issues/446 • CWE-94: Improper Control of Generation of Code ('Code Injection') •