Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/07/16 8:58 p.m.5 views

CVE-2025-53623

The Job Iteration API is an an extension for ActiveJob that make jobs interruptible and resumable Versions prior to 1.11.0 have an arbitrary code execution vulnerability in the CsvEnumerator class. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system wher...

9.3CVSS8.5AI score0.01235EPSS
Exploits0References1
Veracode
Veracode
added 2025/07/16 7:34 a.m.4 views

Arbitrary Code Execution (ACE)

job-iteration is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to improper handling of input in the CsvEnumerator class, which allows an attacker to execute arbitrary commands on the host system by exploiting unsanitized file paths or untrusted input...

9.3CVSS7.3AI score0.01235EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2025/07/14 8:15 p.m.5 views

CVE-2025-53623

The Job Iteration API is an an extension for ActiveJob that make jobs interruptible and resumable Versions prior to 1.11.0 have an arbitrary code execution vulnerability in the CsvEnumerator class. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system wher...

9.3CVSS0.01235EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/14 7:56 p.m.2 views

CVE-2025-53623 Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

The Job Iteration API is an an extension for ActiveJob that make jobs interruptible and resumable Versions prior to 1.11.0 have an arbitrary code execution vulnerability in the CsvEnumerator class. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system wher...

9.3CVSS7.7AI score0.01235EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/07/14 7:56 p.m.8 views

CVE-2025-53623 Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

The Job Iteration API is an an extension for ActiveJob that make jobs interruptible and resumable Versions prior to 1.11.0 have an arbitrary code execution vulnerability in the CsvEnumerator class. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system wher...

9.3CVSS0.01235EPSS
Exploits0References4
CVE
CVE
added 2025/07/14 7:56 p.m.32 views

CVE-2025-53623

CVE-2025-53623 details a code execution vulnerability in the Job Iteration API (extension for ActiveJob) prior to 1.11.0. The issue resides in the CsvEnumerator class, where untrusted input or CSV filenames can trigger arbitrary commands on the host system. Impact includes potential unauthorized ...

9.3CVSS8.2AI score0.01235EPSS
Exploits0References4
OSV
OSV
added 2025/07/14 5:55 p.m.3 views

GHSA-6QJF-G333-PV38 Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

Impact There is an arbitrary code execution vulnerability in the CsvEnumerator class of the job-iteration repository. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system where the application is running, potentially leading to unauthorized access, data...

9.3CVSS7.8AI score0.01235EPSS
Exploits0References7
RubySec
RubySec
added 2025/07/14 12:0 a.m.8 views

Job Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator class

Impact There is an arbitrary code execution vulnerability in the CsvEnumerator class of the job-iteration repository. This vulnerability can be exploited by an attacker to execute arbitrary commands on the system where the application is running, potentially leading to unauthorized access, data...

9.3CVSS7.2AI score0.01235EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder