CVE-2023-46055

https://notcve.org/view.php?id=CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint. Un problema en ThingNario Photon v.1.0 permite a un atacante remoto ejecutar código arbitrario y escalar privilegios a través de un script manipulado a la función de ping al endpoint "thingnario Logger Maintenance Webpage". • https://gist.github.com/GroundCTL2MajorTom/eef0d55f5df77cc911d84392acdbf625 • CWE-94: Improper Control of Generation of Code ('Code Injection') •