writeups.xyz / SSH ProxyCommand == unexpected code execution (CVE-2023-51385)

Submitter : c2a

Date: 20 December 2023

Bounty : undisclosed

Vulnerabilities :

• OS Command Injection
• RCE

Programs :

• OpenSSH

Authors :

• Vin01

Link :
https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html