CVE-2022-4721: Lack of sanitisation of characters in SSH key name could allow attacker to inject a hyperlink injection in rdiffweb

Description

Lack of sanitisation of characters in SSH key name could allow attacker to inject a hyperlink injection that could allow attacker to redirect victim to malicious websites

Proof of Concept

1) Go to https://rdiffweb-dev.ikus-soft.com/prefs/sshkeys 
2) Add SSH key
3) Enter the name evil.com 
4) Due to lack of sanitisation , this might cause a hyperlink injection attack once email is triggered successfully on adding SSH key




# Impact

This issue allows an attacker to redirect victim to malicious website and cause a phishing attack