Mik317

A critical vulnerability was found in SimbCo httpster, affecting the `fs.realpathSync` function of the file `src/server.coffee`. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used.

The issue concerns Command Injection via the stop function.

The issue is related to a lack of output sanitization, which allowed an attack to execute arbitrary shell commands via the logkitty npm package.

The issue allows redirects to untrusted websites in its login flow. A remote unauthenticated attacker could convince a user to click on a link using the OAuth redirect link with an untrusted website and gain access to that user's access token in Concourse.

The issue is related to an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This redirect URL is checked within the proxy and validated before redirecting the user to prevent malicious actors providing redirects to potentially harmful sites. However, by crafting a redirect URL with HTML encoded whitespace characters, the validation could be bypassed and allow a redirect to any URL provided.

The issue allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.

A Code Injection issue exists in treekill and tree-kill on Windows, allowing remote code execution when an attacker controls the input into the command. This can be exploited by creating a Proof of Concept (PoC) file that utilizes the `treekill` module to execute malicious commands.

The issue allows CRLF injection in the Location header of "/auth/login" and "/auth/logout" API endpoints via the `redirect` parameter. This affects other web sites in the same domain.