CVE-2022-4768: Dropbox merou SSH Public Key public_key.py add_public_key injection
A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function addpublickey of the file grouper/publickey.py of the component SSH Public Key Handler. The manipulation of the argument publickeystr leads to injection. It is possible to launch the attack remotely. The name of the patch is d93087973afa26bc0a2d0a5eb5c0fde748bdd107. It is recommended to apply a patch to fix this issue. VDB-216906 is the identifier assigned to this vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4768?
The severity of CVE-2022-4768 is critical.
What is the affected software of CVE-2022-4768?
The affected software of CVE-2022-4768 is Dropbox merou.
What is the description of CVE-2022-4768?
CVE-2022-4768 is a critical vulnerability in Dropbox merou that allows injection attacks through the add_public_key function of the SSH Public Key Handler component.
How can I fix CVE-2022-4768?
To fix CVE-2022-4768, it is recommended to update to a version of Dropbox merou released after March 28, 2022.
Are there any references related to CVE-2022-4768?
Yes, you can find references related to CVE-2022-4768 at the following links: [GitHub Commit](https://github.com/dropbox/merou/commit/d93087973afa26bc0a2d0a5eb5c0fde748bdd107), [GitHub Pull Request](https://github.com/dropbox/merou/pull/673), [VulDB](https://vuldb.com/?ctiid.216906).