Materialise OrthoView OS Command Injection Vulnerability

A command injection vulnerability has been identified in Materialise OrthoView versions through 7.5.1. This issue arises when servlet sharing is enabled, allowing unauthenticated users to execute arbitrary commands on the OrthoView server.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the OrthoView server.

Remediation

Users with OrthoView installations that have servlet sharing enabled should contact OrthoView support at orthoviewsupport@materialise.co.uk for guidance on mitigating this vulnerability.