Minimax Code
Monthly
OS command injection in Minimax Code 0.5.8 lets an attacker who controls the -exec argument of the Find Command Handler inject and execute operating-system commands. Exploitation requires a valid low-privilege account (PR:L) plus passive user interaction (UI:P), and only version 0.5.8 is identified as affected; the vector's low confidentiality, integrity and availability ratings indicate command execution in a constrained context rather than full host takeover. No public exploit code has been identified at time of analysis, the vendor was contacted but did not respond, and this is tracked as a medium-severity, this-month priority item rather than an emergency.
OS command injection in Minimax Code 0.5.8 lets an attacker who controls the -exec argument of the Find Command Handler inject and execute operating-system commands. Exploitation requires a valid low-privilege account (PR:L) plus passive user interaction (UI:P), and only version 0.5.8 is identified as affected; the vector's low confidentiality, integrity and availability ratings indicate command execution in a constrained context rather than full host takeover. No public exploit code has been identified at time of analysis, the vendor was contacted but did not respond, and this is tracked as a medium-severity, this-month priority item rather than an emergency.