Launchpad.net

CVE 2020-24916

CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.

See the CVE page on Mitre.org for more details.