Shell command injection in command_wrap

2017-10-2418:33:37

Google

osv.dev

0.019 Low

EPSS

Percentile

88.4%

JSON

command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

CPENameOperatorVersion
command_wrapeq0.3
command_wrapeq0.5.2
command_wrapeq0.6
command_wrapeq0.6.2
command_wrapeq0.1
command_wrapeq0.4
command_wrapeq0.5
command_wrapeq0.2
command_wrapeq0.6.1
command_wrapeq0.5.1

Name	Operator	Version
command_wrap	eq	0.3
command_wrap	eq	0.5.2
command_wrap	eq	0.6
command_wrap	eq	0.6.2
command_wrap	eq	0.1
command_wrap	eq	0.4
command_wrap	eq	0.5
command_wrap	eq	0.2
command_wrap	eq	0.6.1
command_wrap	eq	0.5.1