CVE-2013-7086

🗓️ 19 Dec 2013 02:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 109 Views🌐 WEB

The Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2013-7086	19 Dec 201302:00	–	cvelist
EUVD	EUVD-2017-0278	7 Oct 202500:30	–	euvd
Github Security Blog	Webbynode Code Injection vulnerability	24 Oct 201718:33	–	github
NVD	CVE-2013-7086	19 Dec 201304:24	–	nvd
OSV	GHSA-P65M-QR5X-RRQQ Webbynode Code Injection vulnerability	24 Oct 201718:33	–	osv
Prion	Design/Logic Flaw	19 Dec 201304:24	–	prion
RubySec	Webbynode Gem for Ruby notify.rb growlnotify Message Handling Arbitrary Command Execution	12 Dec 201300:00	–	rubygems
seebug.org	Webbynode Ruby Gems命令注入漏洞	17 Dec 201300:00	–	seebug

NVD

Node

webbynode webbynodeRange≤1.0.5.3---ruby

webbynode webbynodeMatch1.0.5.1---ruby

webbynode webbynodeMatch1.0.5.2---ruby

Source	Link
osvdb	www.osvdb.org/100920
securityfocus	www.securityfocus.com/bid/64289
packetstormsecurity	www.packetstormsecurity.com/files/124421
vapid	www.vapid.dhs.org/advisories/webbynode-command-inj.html
seclists	www.seclists.org/oss-sec/2013/q4/497
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/89705
seclists	www.seclists.org/oss-sec/2013/q4/493
archives	www.archives.neohapsis.com/archives/bugtraq/2013-12/0079.html
github	www.github.com/webbynode/webbynode/pull/85

Parameter	Position	Path	Description	CWE
message	request body	rubygems.org/gems/webbynode	Shell metacharacters in growlnotify message allow command execution in affected Webbynode gem versions <= 1.0.5.3	CWE-94
growlnotify command argument	request body	rubygems.org/gems/webbynode	Shell metacharacters in growlnotify message allow command execution in affected Webbynode gem versions <= 1.0.5.3	CWE-94

17 Jun 2026 00:01Current

7.6High risk

Vulners AI Score7.6

CVSS 27.5

EPSS0.03529