Description
The flash_tool gem through 0.6.0 for Ruby allows command execution via shell metacharacters in the name of a downloaded file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | flash_tool | <= 0.6.0 | — | GHSA-6325-6g32-7p35 |
Critical · 9.8
CVE-2013-2513
EUVD-2023-0348GHSA-6325-6g32-7p35
flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution
Published Dec 12, 2023 · Updated Aug 6, 2024 · Assigned by mitre