Skip to content
OpenAdvisories
High CVE-2013-2616 EUVD-2017-0322GHSA-w754-gq8r-pf5f

MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection

Published Mar 20, 2013 · Updated Aug 6, 2024 · Assigned by mitre

Package: mini_magick Ecosystem: RubyGems

Description

lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems mini_magick < 3.6.0 3.6.0 GHSA-w754-gq8r-pf5f

References