Read Time:15 Second
Posted by Austin DeFrancesco via Fulldisclosure on Feb 13
Command Injection Vulnerability in KiTTY Get Remote File Through SCP Input (CVE-2024-23749)
===========================================================================================
Contents:
———
Summary
Analysis
Exploitation
Acknowledgments
Timeline
Additional Advisory
Summary:
——–
Austin A. DeFrancesco (DEFCESCO) discovered a command injection vulnerability in KiTTY
(https://github.com/cyd01/KiTTY/). This vulnerability:…