Dylan Simon

The issue allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands, due to a directory traversal vulnerability in the Admin Defined Commands (ADC) feature.