CVE-2020-10818

Name of the Vulnerable Software and Affected Versions Artica Proxy version 4.26

Description The issue allows remote command execution for an authenticated user via shell metacharacters in the hostname field. This can be exploited by including shell metacharacters in the "Modify the hostname" field.

Recommendations For Artica Proxy version 4.26, consider restricting access to the "Modify the hostname" field to prevent the inclusion of shell metacharacters until a patch is available. As a temporary workaround, validate and sanitize user input in the "Modify the hostname" field to prevent command execution.