| タイトル | bastillion-io Bastillion <=4.0.1 Command Injection |
|---|
| 説明 | A command injection vulnerability has been identified in the public key management system. Authenticated users with public key upload privileges can inject malicious commands by including specially crafted content in their public keys, which are then executed on remote systems during SSH key distribution operations. |
|---|
| ソース | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report1.md |
|---|
| ユーザー | Ana10gy (UID 93358) |
|---|
| 送信 | 2026年01月04日 15:26 (9 月 ago) |
|---|
| モデレーション | 2026年01月16日 20:14 (12 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 341631 [bastillion-io Bastillion 迄 4.0.1 Public Key Management System AuthKeysKtrl.java 特権昇格] |
|---|
| ポイント | 18 |
|---|