CVE-2020-24364 – MineTime through 1.8.5 allows arbitrary command execution via the notes f

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24364

Reference (s):

• https://github.com/theart42/cves/blob/master/cve-2020-24364/CVE-2020-24364.md
• https://minetime.ai