description: Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges.
problem types: Authenticated Python Code Injection
affected:
{
product: Druva inSync Mac OS Client
vendor: n/a
versions:
status: affected, version: 6.5.0
}