Julian Beier

The issue allows for authenticated remote code execution through the backup functionality of the web frontend.

The issue allows for unauthenticated path traversal, enabling an attacker to download the application database. This can potentially be combined with other exploits for further access.

The issue allows remote code execution via the backup functionality in the web frontend. An attacker with network access can exploit this to gain root access on the gateway.

The issue allows local privilege escalation via a race condition in logrotate. An attacker with access to the network can exploit this to gain root access on the gateway.

The issue allows an attacker with network access to gain root access on the gateway by exploiting a passwordless ftp ssh user through an exploit chain.

The issue affects the admin interface of the Grouptime Teamwire Client, allowing stored XSS attacks.

The issue allows code injection via a template, leading to remote code execution.