GHSA-5F2P-6VJV-2Q2M Sup Code Injection vulnerability

Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment...

Sup Code Injection vulnerability

lib/sup/messagechunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the contenttype of an email attachment...

sup Remote Command Execution

Phenoelit Advisory Authors joernchen Phenoelit Group http://www.phenoelit.de Affected Products sup /tmp/whatsup'pwn" will generate a file "whatsup" in the /tmp directory. Solution Upgrade to version 0.14.1.1 or 0.13.2.1 References 0 https://github.com/sup-heliotro...