CVE-2025-4678

Vulnerability Description

Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105.

Related Weaknesses (CWE)

CWE-77

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

FAQ

What is CVE-2025-4678?

CVE-2025-4678 is a documented vulnerability. Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue affects Pandora ITSM 5.0.105.

How severe is CVE-2025-4678?

CVSS scoring is not yet available for CVE-2025-4678. Check NVD for updates.

Is there a patch for CVE-2025-4678?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.