Skip to content
OpenAdvisories
Critical · 9.8 CVE-2013-2095 EUVD-2022-2947GHSA-77xq-7c6p-6xp6

RubyGem openshift-origin-controller is vulnerable to command injection

Published Dec 10, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Vendor: rubygem-openshift-origin-controller Product: rubygem-openshift-origin-controller Package: openshift-origin-controller Ecosystem: RubyGems

Description

rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection

Affected products

VendorProductAffectedFixed
rubygem-openshift-origin-controller rubygem-openshift-origin-controller through 2013-05-15 —

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems openshift-origin-controller <= 1.3.4 — GHSA-77xq-7c6p-6xp6

References