Summary by radithyaputra
"An unauthenticated Remote Code Execution (RCE) vulnerability was discovered and responsibly disclosed in a NASA CGI endpoint, allowing arbitrary OS command execution through unvalidated parameters."
Unauthenticated OS Command Injection (RCE) in NASA International Mass Loading Service CGI (massloading.smce.nasa.gov /cgi-bin/eop_series.py)
Disclosed by radithyaputra- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date 11 days ago
- Priority P1 Bugcrowd's VRT priority rating
- Status Resolved This vulnerability has been accepted and fixed