Command Injection

github.com/cea-hpc/sshproxy is vulnerable to Command Injection. The vulnerability is due to missing input santization when constructing the ssh command string, which allows an authorized user to inject options into the ssh command executed by sshproxy...

sshproxy 命令注入漏洞

sshproxy is an open source proxy program from cea-hpc. A command injection vulnerability exists in sshproxy versions prior to 1.6.3, which stems from the presence of SSH command injection...