CVE-2022-4768

CVE-2022-4768 affects Dropbox Merou’s SSH Public Key Handler. The vulnerability lies in the add_public_key function of grouper/public_key.py, where manipulating the argument public_key_str leads to injection. It is possible to launch the attack remotely. The patch identified is d93087973afa26bc0a...