Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13159
Reference (s):
- https://github.com/InfoSec4Fun/CVE-2020-13159
- https://sourceforge.net/projects/artica-squid/files/