Cpe:2.3:a:cc_connect:cc_connect:*:*:*:*:*:*:*:*

The MAX platform adapter in cc-connect version 1.5.0 and earlier allows unauthenticated attackers to forge webhook updates and execute arbitrary shell commands on the host system.