EUVD-2017-0279

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Command wrap Gem in Ruby vulnerable to remote command execution via shell metacharacters

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2013-1875	20 Mar 201322:00	–	cve
Cvelist	CVE-2013-1875	20 Mar 201322:00	–	cvelist
Github Security Blog	Shell command injection in command_wrap	24 Oct 201718:33	–	github
NVD	CVE-2013-1875	20 Mar 201322:55	–	nvd
OSV	GHSA-P673-HJF2-PWFR Shell command injection in command_wrap	24 Oct 201718:33	–	osv
Prion	Design/Logic Flaw	20 Mar 201322:55	–	prion
RedhatCVE	CVE-2013-1875	22 May 202506:06	–	redhatcve
RubySec	command_wrap Gem for Ruby URI Handling Arbitrary Command Injection	18 Mar 201300:00	–	rubygems

[
  {
    "enisaIdVendor": [
      {
        "id": "8ce572e9-d6b7-356d-9e88-bc57c93f63e1",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ed3b5189-40b4-3c59-a765-0dfa48db0833",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-1875
github	www.github.com/advisories/GHSA-p673-hjf2-pwfr
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/command_wrap/CVE-2013-1875.yml
github	www.github.com/slicertje/commandwrap
packetstormsecurity	www.packetstormsecurity.com/files/120847/Ruby-Gem-Command-Wrap-Command-Execution.html
seclists	www.seclists.org/fulldisclosure/2013/Mar/175
openwall	www.openwall.com/lists/oss-security/2013/03/19/9
osvdb	www.osvdb.org/91450
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 27.5

EPSS0.00731