CVE-2020-12078

CVE-2020-12078 is a critical shell metacharacter injection vulnerability affecting Open-AudIT 3.3.1. An authenticated attacker can exploit this by injecting malicious commands into the "exclude_ip" parameter within the global discovery settings, which is then executed unfiltered. With a CVSS score of 8.8 (High), this flaw allows for complete compromise of confidentiality, integrity, and availability of the affected system. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is minimal community discussion or media coverage, the high EPSS and FAUCET Risk Score indicate a significant potential for future exploitation.