CVE-2020-24364

MineTime through 1.8.5 allows arbitrary command execution via the notes field in a meeting. Could lead to RCE via meeting invite.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-08-24

Last modified

2024-08-04

Weaknesses

CWE-74

Affected products

• Minetime (Ethz)

References

• https://github.com/theart42/cves/blob/master/cve-2020-24364/CVE-2020-24364.md
• https://minetime.ai