SSH key injection in Google Cloud Compute Engine

Google Cloud Compute Engine (GCE) was vulnerable to SSH key injection by abusing an SSH-in-browser feature to change username and password.
An attacker could send a specially-crafted link to a target user, and if the victim was logged into GCP and clicked the link,
the attacker's SSH username and password would be added to the target machine, thereby allowing the attacker to log into it.
This was possible because no random token or CSRF protection had been implemented for the …

abusing browser change cloud compute compute engine engine gcp google google cloud injection key link log machine password random send ssh target token username victim vulnerable