Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2017/10/24 6:33 p.m.•42 views

sprout Arbitrary Code Execution vulnerability

The unpackzip function in archiveunpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a 1 filename or 2 path...

7.5CVSS7.2AI score0.01971EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2017/10/24 6:33 p.m.•48 views

GHSA-229R-PQP6-8W6G sprout Arbitrary Code Execution vulnerability

The unpackzip function in archiveunpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a 1 filename or 2 path...

7.5CVSS7.2AI score0.01971EPSS
SaveExploits1References7
Mend
Mend
•added 2013/12/12 6:00 p.m.•2 views

CVE-2013-6421

The unpackzip function in archiveunpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a 1 filename or 2 path...

7.5CVSS0.01971EPSS
SaveExploits1References7
Rows per page
Query Builder