EUVD-2017-0187

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Remote attackers can execute arbitrary commands via shell metacharacters in Thumbshooter 0.1.5 Ruby gem

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2013-1898	9 Apr 201320:00	–	cve
Cvelist	CVE-2013-1898	9 Apr 201320:00	–	cvelist
Github Security Blog	Thumbshooter vulnerable to Code Injection	24 Oct 201718:33	–	github
NVD	CVE-2013-1898	9 Apr 201320:55	–	nvd
OSV	GHSA-7FQJ-CG79-F2PV Thumbshooter vulnerable to Code Injection	24 Oct 201718:33	–	osv
Prion	Code injection	9 Apr 201320:55	–	prion
RedhatCVE	CVE-2013-1898	22 May 202511:20	–	redhatcve
RubySec	Thumbshooter Gem for Ruby thumbshooter.rb URL Shell Metacharacter Injection Arbitrary Command Execution	26 Mar 201300:00	–	rubygems

[
  {
    "enisaIdVendor": [
      {
        "id": "598570f6-83ff-35c6-a498-4d0b36b022d8",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "00de789a-b1bd-3e55-b04e-327b7724fe18",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-1898
github	www.github.com/digineo/thumbshooter
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/thumbshooter/CVE-2013-1898.yml
seclists	www.seclists.org/fulldisclosure/2013/Mar/218
vapid	www.vapid.dhs.org/advisories/thumbshooter-ruby-gem-remoteexec.html
openwall	www.openwall.com/lists/oss-security/2013/03/26/13
openwall	www.openwall.com/lists/oss-security/2013/03/26/3
osvdb	www.osvdb.org/91839
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 27.5

EPSS0.00977