CVE-2024-1297

Published February 20th, 2024

View on NVD ↗

CVSS v3

7.2

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to OS Command Injection.

loomio/loomio

Loomio is a collaborative decision making tool

GitHub

2.55K