Lucene search

K
huntrNehalr7773C48EF5D-DA4D-4EE4-AACA-AF65E7273720
HistoryDec 20, 2022 - 3:46 p.m.

Lack of sanitisation of characters in SSH key name could allow attacker to inject a hyperlink injection

2022-12-2015:46:46
nehalr777
www.huntr.dev
7
ssh key
sanitisation
hyperlink injection
attacker
malicious websites
bug bounty

EPSS

0.001

Percentile

30.3%

Description

Lack of sanitisation of characters in SSH key name could allow attacker to inject a hyperlink injection that could allow attacker to redirect victim to malicious websites

Proof of Concept

1) Go to https://rdiffweb-dev.ikus-soft.com/prefs/sshkeys 
2) Add SSH key
3) Enter the name evil.com 
4) Due to lack of sanitisation , this might cause a hyperlink injection attack once email is triggered successfully on adding SSH key


EPSS

0.001

Percentile

30.3%

Related for 3C48EF5D-DA4D-4EE4-AACA-AF65E7273720