CVE:CVE-2021-23247
CNNVD:CNNVD-202204-1833
quick game engine是一款开源游戏框架。
quick game engine存在命令注入漏洞，该漏洞源于quick app可以任意执行远程代码。远程攻击者利用该漏洞在quick game engine中执行任意代码。
solution:Upgrade oppo quick_app to a higher version than 4.5.0,and avoid the version 4.5.0