2 matches found
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
active-support ruby gem could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system...
10CVSS6AI score0.06129EPSS
SaveExploits1References3Affected Software1
CVE-2018-3779
active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system...
10CVSS9.7AI score0.06129EPSS
SaveExploits1References1
20