21Eki
Are command injections examples of confused deputies?
In a command injection you trick a service into doing something for you that it would not normally do. Does that mean that command injections are examples of (exploiting) confused deputies? Does the reverse also hold?
More generally, are command injection and confused deputies two sides of the same coin or is their relation more complicated?
