Improper input validation in Ossp Shiela

CVE-2006-3633

OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.033 (87.3th percentile) — read the EPSS interpretation.

Affected products

  • Ossp Shiela — versions 0.9.0, 0.9.1, 0.9.2
  • N/a — versions n/a

Weakness classification (CWE)

References