Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000009.json"