CVE-2021-28961

Summary: 
applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests.
Published: 
Sunday, March 21, 2021 - 06:15
cvss: 
5.0