CVE-2020-7839

Name of the Vulnerable Software and Affected Versions: MaEPSBroker versions 2.5.0.31 and prior

Description: A command injection issue is caused by improper input validation checks when parsing the brokerCommand parameter. This allows for potential exploitation due to the lack of proper validation.

Recommendations: For MaEPSBroker versions 2.5.0.31 and prior, as a temporary workaround, consider restricting or validating the input for the brokerCommand parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.