RCE in Rubygems Command Wrap
CVE-2013-1875
command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.036 (88.4th percentile) — read the EPSS interpretation.
Affected products
- Rubygems Command_wrap
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_FULLDISC)
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)