【中文导读】该 CVE 涉及命令注入(高危风险)。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rule evaluation. Thus, an administrator who can edit a rule evaluated by the Safe jail can execute commands on the server.