Lucene search
HistoryDec 12, 2013 - 6:55 p.m.
CVE-2013-6421
cve-2013-6421
sprout gem
ruby
arbitrary command execution
security vulnerability
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.2%
The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.
| CPE | Name | Operator | Version |
|---|---|---|---|
| projectsprouts:sprout | projectsprouts sprout | eq | 0.7.246 |
Related
prion
prion
Path traversal
2013-12-12 18:55:00
osv
osv
sprout Arbitrary Code Execution vulnerability
2017-10-24 18:33:36
github
github
sprout Arbitrary Code Execution vulnerability
2017-10-24 18:33:36
kitploit
kitploit
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.2%
Related for CVE-2013-6421