Description
SRS v5.0.137~v5.0.156, v6.0.18~v6.0.47 api-server存在命令注入，攻击者可以利用该漏洞执行恶意命令，进而控制整个系统。
SRS 命令注入漏洞(CVE-2023-34105)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-34105
https://github.com/ossrs/srs/security/advisories/GHSA-vpr5-779c-cx62
https://securitylab.github.com/advisories/GHSL-2023-025_SRS/
https://avd.aliyun.com/detail?id=AVD-2023-34105
https://cve.imfht.com/detail/CVE-2023-34105
https://security.snyk.io/vuln/SNYK-UNMANAGED-OSSRSSRS-5703258
https://www.cvedetails.com/cve/CVE-2023-34105/
https://pentest-tools.com/vulnerabilities-exploits/srs-command-injection_23100