Skip to content
OpenAdvisories
Critical · 9.8 CVE-2017-2096 EUVD-2022-3682GHSA-f489-655r-x6gr

smalruby and smalruby-editor vulnerable to OS Command Injection

Published Apr 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Ruby Programming Shounendan Product: smalruby-editor Package: smalruby Package: smalruby-editor Ecosystem: RubyGems

Description

smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

Affected products

VendorProductAffectedFixed
Ruby Programming Shounendan smalruby-editor v0.4.0 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems smalruby < 0.1.11 0.1.11 GHSA-f489-655r-x6gr
RubyGems smalruby-editor < 0.4.1 0.4.1 GHSA-f489-655r-x6gr

References