📦 Duo

An unauthenticated remote attacker can inject arbitrary commands into emails sent by Cisco Duo's self-service portal due to insufficient input validation. This allows sending malicious emails to users...