Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-51385

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.059
EPSS Ranking 90.1%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2023-51385


Contact Us

Shodan ® - All rights reserved