Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1875
cve-2013-1875
command_wrap
ruby
gem
remote attackers
arbitrary commands
shell metacharacters
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.5%
command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.
Affected configurations
Node
rubygemscommand_wrapMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| rubygems:command_wrap | rubygems command wrap | eq | - |
Related
github
github
Shell command injection in command_wrap
2017-10-24 18:33:37
prion
prion
Design/Logic Flaw
2013-03-20 22:55:00
nvd
nvd
CVE-2013-1875
2013-03-20 22:55:00
cvelist
cvelist
CVE-2013-1875
2022-10-03 16:14:48
osv
osv
Shell command injection in command_wrap
2017-10-24 18:33:37
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.5%
Related for CVE-2013-1875