Lucene search

Thumbshooter vulnerable to Code Injection

🗓️ 24 Oct 2017 18:37:33Reported by GitHub Advisory DatabaseType

Thumbshooter vulnerability in Ruby ge

Reporter	Title	Published	Views	Family All 6
Prion	Code injection	9 Apr 201320:55	–	prion
OSV	Thumbshooter vulnerable to Code Injection	24 Oct 201718:33	–	osv
CVE	CVE-2013-1898	9 Apr 201320:55	–	cve
RubySec	Thumbshooter Gem for Ruby thumbshooter.rb URL Shell Metacharacter Injection Arbitrary Command Execution	25 Mar 201320:00	–	rubygems
Cvelist	CVE-2013-1898	9 Apr 201320:00	–	cvelist
NVD	CVE-2013-1898	9 Apr 201320:55	–	nvd

Vulners

Node

-thumbshooterRange≤0.1.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-1898
seclists	www.seclists.org/fulldisclosure/2013/Mar/218
vapid	www.vapid.dhs.org/advisories/thumbshooter-ruby-gem-remoteexec.html
openwall	www.openwall.com/lists/oss-security/2013/03/26/13
openwall	www.openwall.com/lists/oss-security/2013/03/26/3
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/thumbshooter/CVE-2013-1898.yml
github	www.github.com/advisories/GHSA-7fqj-cg79-f2pv

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2017 18:33Current

7.9High risk

Vulners AI Score7.9

CVSS27.5

EPSS0.008

CWE-94