| عنوان | bastillion-io Bastillion <=4.0.1 Command Injection |
|---|
| الوصف | A command injection vulnerability has been identified in the public key management system. Authenticated users with public key upload privileges can inject malicious commands by including specially crafted content in their public keys, which are then executed on remote systems during SSH key distribution operations. |
|---|
| المصدر | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report1.md |
|---|
| المستخدم | Ana10gy (UID 93358) |
|---|
| ارسال | 04/01/2026 03:26 PM (9 أشهر منذ) |
|---|
| الاعتدال | 16/01/2026 08:14 PM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 341631 [bastillion-io Bastillion حتى 4.0.1 Public Key Management System AuthKeysKtrl.java تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|