Description
The karo gem 2.3.8 for Ruby allows Remote command injection via the host field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | karo | <= 2.5.2 | — | GHSA-qfwq-chf4-jvwg |
Critical · 9.8
CVE-2014-10075
EUVD-2022-4963GHSA-qfwq-chf4-jvwg
karo Metacharacter Handling Remote Command Execution
Published Oct 5, 2018 · Updated Sep 16, 2024 · Assigned by mitre