Skip to content
OpenAdvisories
High CVE-2013-1875 EUVD-2017-0279GHSA-p673-hjf2-pwfr

Shell command injection in command_wrap

Published Mar 20, 2013 · Updated Sep 16, 2024 · Assigned by redhat

Description

command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems command_wrap <= 0.6.2 — GHSA-p673-hjf2-pwfr

References