Webbynode Code Injection vulnerability

2017-10-2418:33:36

Google

osv.dev

0.01 Low

EPSS

Percentile

84.1%

JSON

The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.

CPENameOperatorVersion
webbynodeeq1.0.3
webbynodeeq0.2.4
webbynodeeq1.0.2
webbynodeeq1.0.3.beta1
webbynodeeq1.0.5.beta6
webbynodeeq1.0.5.2
webbynodeeq1.0.4
webbynodeeq1.0.4.beta4
webbynodeeq1.0.5.beta7
webbynodeeq1.0.5.beta5

Name	Operator	Version
webbynode	eq	1.0.3
webbynode	eq	0.2.4
webbynode	eq	1.0.2
webbynode	eq	1.0.3.beta1
webbynode	eq	1.0.5.beta6
webbynode	eq	1.0.5.2
webbynode	eq	1.0.4
webbynode	eq	1.0.4.beta4
webbynode	eq	1.0.5.beta7
webbynode	eq	1.0.5.beta5