CVE-2024-12971 - QuickShell Authenticated Command Injection

Back Back to CVE browser

HIGH

QuickShell Authenticated Command Injection

Published Mar 17, 2025

8.6

HIGH

CVSS 4.0

EPSS 61.49%

Description

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6

Affected products

Vendor Pandora FMS Product Pandora FMS Default
unaffected
- Version
  700
  Status
  affected
  Constraints
  <=777.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Pandora FMS

unaffected

Version	Status	Constraints
700	affected	<=777.6

Remediation

Vendor solution

Fixed in v781 and v777.8

Weaknesses (1)

CWE-77

References (1)

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
Vendor Advisory

Link	Providers	Tags
https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner PandoraFMS

Published Mar 17, 2025

Updated Mar 17, 2025

Reserved Dec 26, 2024

Link CVE-2024-12971

CISA Vulnrichment

Updated Mar 17, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2024-12971

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-12971