CVE-2019-3463 on Ubuntu 18.04 LTS (bionic) - high.
Description:
Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.