CVE-2024-55215

CVE-2024-55215 affects trojan versions 2.0.0 through 2.15.3. A remote attacker can escalate privileges via the initialization interface /auth/register. The root cause is unsanitized user input for the line parameter in the /trojan/log endpoint, which is concatenated into a shell command, enabling...