Description
lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | curl | <= 0.0.9 | — | GHSA-hxx6-p24v-wg8c |
High
CVE-2013-2617
EUVD-2017-0255GHSA-hxx6-p24v-wg8c
Curl Gem insufficient URL escaping command injection
Published Mar 20, 2013 · Updated Sep 16, 2024 · Assigned by mitre