Skip to content
OpenAdvisories

Product · Shopify

job-iteration

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

    The Job Iteration API is an an extension for ActiveJob that make jobs interruptible and resumable Versions prior to 1.11.0 have an arbitrary code execution vulnerability in the `CsvEnumerator` class. This vulnerability can be exploited by an attacker to execu…