CVE-2017-1000009

Critical

Published: 17/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Akeneo PIM CE and EE versions below 1.6.6, 1.5.15, and 1.4.28 are vulnerable to shell injection in mass editing, leading to remote code execution.

Risk Assessment

Exploitation of this vulnerability could allow attackers to execute commands remotely on the server, posing a serious threat to data and system security.

Recommendation

It is recommended to update Akeneo PIM to the latest version to mitigate this vulnerability and reduce the risk of remote code execution.

Original NVD description (English source)

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.