CVE-2017-6199

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field.

• CWE-287

• https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/Exploit, Third Party Advisory
• https://github.com/sandstorm-io/sandstorm/blob/v0.202/shell/packages/sandstorm-db/db.js#L1112Third Party Advisory
• https://github.com/sandstorm-io/sandstorm/commit/37bd9a7f4eb776cdc2d3615f0bfea1254b66f59dPatch, Third Party Advisory
• https://sandstorm.io/news/2017-03-02-security-reviewVendor Advisory
• https://devco.re/blog/2018/01/26/Sandstorm-Security-Review-CVE-2017-6200-en/Exploit, Third Party Advisory
• https://github.com/sandstorm-io/sandstorm/blob/v0.202/shell/packages/sandstorm-db/db.js#L1112Third Party Advisory
• https://github.com/sandstorm-io/sandstorm/commit/37bd9a7f4eb776cdc2d3615f0bfea1254b66f59dPatch, Third Party Advisory
• https://sandstorm.io/news/2017-03-02-security-reviewVendor Advisory

Published

Feb 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6193Buffer overflow in APNGDis 2.8 and earlier allows remote att…
• CVE-2017-6194The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.…
• CVE-2017-6195Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentic…
• CVE-2017-6196Multiple use-after-free vulnerabilities in the gx_image_enum…
• CVE-2017-6197The r_read_* functions in libr/include/r_endian.h in radare2…
• CVE-2017-6198The Supervisor in Sandstorm doesn't set and enforce the reso…
• CVE-2017-6200Sandstorm before build 0.203 allows remote attackers to read…
• CVE-2017-6201A Server Side Request Forgery vulnerability exists in the in…
• CVE-2017-6205D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-…
• CVE-2017-6206D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-…
• CVE-2017-6207Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-6209Stack-based buffer overflow in the parse_identifier function…