Two critical bugs in Apache Unomi allowed attackers to run OS commands on vulnerable servers

By leveraging shortcomings in a previous patch, security researchers from Checkmarx found that an attacker could send malicious API requests that resulted in remote code execution.