3 matches found
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
active-support ruby gem could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system...
CVE-2018-3779
active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system...
PT-2018-1454
Name of the Vulnerable Software and Affected Versions active-support ruby gem version 5.2.0 Description The issue is related to the presence of a malicious backdoor in the active-support ruby gem, which could allow a remote attacker to execute arbitrary code on the system. This is caused by the g...