Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2017/10/24 6:33 p.m.36 views

sprout Arbitrary Code Execution vulnerability

The unpackzip function in archiveunpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a 1 filename or 2 path...

7.5CVSS7.2AI score0.01971EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2017/10/24 6:33 p.m.36 views

GHSA-229R-PQP6-8W6G sprout Arbitrary Code Execution vulnerability

The unpackzip function in archiveunpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a 1 filename or 2 path...

7.5CVSS7.2AI score0.01971EPSS
SaveExploits1References7
Rows per page
Query Builder