The ping function is poorly sanitized. By appending shell metacharacters like backticks ( ` ), semicolons ( ; ), or pipes ( | ), you can force the server to execute arbitrary system commands.
Sensitive configuration files, environment variables (like API keys), and database credentials can be stolen. ultratech api v013 exploit
: By running a Docker command that mounts the host's root filesystem into a container, you can access any file on the host machine. The ping function is poorly sanitized
