CVEs-PoC/2019/CVE-2019-3463.md

CVE-2019-3463

Description

Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.

POC

Reference

• http://seclists.org/fulldisclosure/2021/May/78
• http://seclists.org/fulldisclosure/2021/May/78

Github

No PoCs found on GitHub currently.