| 제목 | bastillion-io Bastillion <=4.0.1 Command Injection |
|---|
| 설명 | A command injection vulnerability has been identified in the public key management system. Authenticated users with public key upload privileges can inject malicious commands by including specially crafted content in their public keys, which are then executed on remote systems during SSH key distribution operations. |
|---|
| 원천 | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report1.md |
|---|
| 사용자 | Ana10gy (UID 93358) |
|---|
| 제출 | 2026. 01. 04. PM 03:26 (9 개월 ago) |
|---|
| 모더레이션 | 2026. 01. 16. PM 08:14 (12 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 341631 [bastillion-io Bastillion 까지 4.0.1 Public Key Management System AuthKeysKtrl.java 권한 상승] |
|---|
| 포인트들 | 18 |
|---|