Lucene search
PRIOn knowledge basePRION:CVE-2013-6421HistoryDec 12, 2013 - 6:55 p.m.
Path traversal
2013-12-1218:55:00
PRIOn knowledge base
www.prio-n.com
1
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.0%
The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.
Related
cve
cve
CVE-2013-6421
2013-12-12 18:55:00
osv
osv
sprout Arbitrary Code Execution vulnerability
2017-10-24 18:33:36
github
github
sprout Arbitrary Code Execution vulnerability
2017-10-24 18:33:36
kitploit
kitploit
8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
70.0%
Related for PRION:CVE-2013-6421