Advisories for Maven/Org.openhab.addons.bundles/Org.openhab.binding.exec package

openHAB allow a remote attacker to use REST calls to install the EXEC binding or EXEC transformation service and execute arbitrary commands on the system with the privileges of the user running openHAB.