CVE-2023-6004

MediumCVSS 4.8/10Last modified Nov 6, 2026

Description

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74

Affected software

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 7	—

References

Timeline

Published: Jan 3, 2024
Last modified: Nov 6, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-60054.8The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 does not sanitize and escape some of its settings, which co CVE-2023-60066.7This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must have CVE-2023-60076.5The UserPro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data due to a missing capabilit CVE-2023-60084.3The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. This is due to missing CVE-2023-60098.8The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.4 due to insufficient restricti CVE-2023-60115.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DECE Software Geodi allows Stored XSS.CVE-2023-60129.8An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could le CVE-2023-60135.4H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack.CVE-2023-60149.8An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.CVE-2023-60157.5MLflow allowed arbitrary files to be PUT onto the server.CVE-2023-60169.8An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.CVE-2023-60177.1H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL.