CVE-2015-5673

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal aka eventapp web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command...

CVE-2015-5673

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal aka eventapp web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command...

CVE-2015-5673

CVE-2015-5673 affects the ISUCON5 qualifier portal web application (eventapp). The issue is an OS command injection in eventapp/lib/gcloud.rb where improper use of popen allows remote attackers to execute arbitrary OS commands by crafting an HTTP request containing shell metacharacters for a gclo...