CVE-2024-24899

Summary

CVE-2024-24899 is a new OS Command Injection vulnerability affecting the openEuler aops-zeus software on Linux systems. The flaw, located in the constant.Py file, stems from improper neutralization of special elements used in operating system commands. Successful exploitation allows attackers to inject arbitrary commands, potentially leading to serious system compromises. Affected versions of aops-zeus include those from 1.2.0 through 1.4.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.