CVEs-PoC/2021/CVE-2021-32826.md

### [CVE-2021-32826](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32826)
![](https://img.shields.io/static/v1?label=Product&message=proxyee-down&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-78%20OS%20Command%20Injection&color=brighgreen)

### Description

Proxyee-Down is open source proxy software. An attacker being able to provide an extension script (eg: through a MiTM attack or by hosting a malicious extension) may be able to run arbitrary commands on the system running Proxyee-Down. For more details including a PoC see the referenced GHSL-2021-053. As of the writing of this CVE there is currently no patched version.

### POC

#### Reference
- https://securitylab.github.com/advisories/GHSL-2021-053-proxyee-down/

#### Github
No PoCs found on GitHub currently.