CVE-2023-37469

Published August 24th, 2023

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.

IceWhaleTech/CasaOS

CasaOS - A simple, easy-to-use, elegant open-source Personal Cloud system.

GitHub

34.1K