RubyGem openshift-origin-controller is vulnerable to command injection

2022-05-0500:29:09

Google

osv.dev

0.004 Low

EPSS

Percentile

72.7%

rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection

CPENameOperatorVersion
openshift-origin-controllereq1.3.4
openshift-origin-controllereq1.3.3
openshift-origin-controllereq1.3.2

Name	Operator	Version
openshift-origin-controller	eq	1.3.4
openshift-origin-controller	eq	1.3.3
openshift-origin-controller	eq	1.3.2

References

access.redhat.com/security/cve/cve-2013-2095

bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2095

github.com/openshift/origin-server

github.com/rubysec/ruby-advisory-db/blob/master/gems/openshift-origin-controller/CVE-2013-2095.yml

nvd.nist.gov/vuln/detail/CVE-2013-2095

0.004 Low

EPSS

Percentile

72.7%

Related for OSV:GHSA-77XQ-7C6P-6XP6