Skip to content
OpenAdvisories

Package · Go

github.com/gravitational/teleport

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2022-36633 Public exploit EPSS 51%

    Improper token validation leading to code execution in Teleport

    Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a …

    github.com/gravitational/teleport Go