writeups.xyz / Orange Arbitrary Command Execution

Submitter : c2a

Date: 29 September 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Docker Daemon Misconfiguration
• Missing Authentication

Programs :

• Orange

Authors :

• Omar Hashem (@OmarHashem666)

Link :
https://omar0x01.medium.com/orange-arbitrary-command-execution-75ba7f283d53