Uniget is vulnerable to command injection because the `check` field is loaded directly from untrusted JSON metadata without validation, allowing an attacker to execute arbitrary shell commands on the victim's system when performing common uniget operations.
PoC
cli
command-injection
vulnerability
linux
2r
1t
1c
updated