CVE-2018-12941

CVE-2018-12941 is a high-severity vulnerability affecting SeedDMS (versions prior to 5.1.8) that allows authenticated attackers with Settings permissions to execute arbitrary system commands. By manipulating the "cacheDir" path and triggering the "Clear Cache" function, an attacker can inject malicious commands, leading to data exfiltration, modification, deletion, or full system compromise. The CVSS score of 8.8 (High) indicates a network-based attack with low complexity, requiring low privileges, and resulting in high impact to confidentiality, integrity, and availability. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.