CVE-2020-13159 – Artica Proxy before 4.30.000000 Community Edition allows OS command injec

5 years ago

Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13159

Reference (s):

https://github.com/InfoSec4Fun/CVE-2020-13159
https://sourceforge.net/projects/artica-squid/files/