CVE-2025-4653

Vulnerability Description

Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105.

Related Weaknesses (CWE)

CWE-77

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

FAQ

What is CVE-2025-4653?

CVE-2025-4653 is a documented vulnerability. Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105.

How severe is CVE-2025-4653?

CVSS scoring is not yet available for CVE-2025-4653. Check NVD for updates.

Is there a patch for CVE-2025-4653?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.