2 matches found
GHSA-229R-PQP6-8W6G sprout Arbitrary Code Execution vulnerability
The unpackzip function in archiveunpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a 1 filename or 2 path...
7.5CVSS7.2AI score0.01971EPSS
SaveExploits1References7
sprout Arbitrary Code Execution vulnerability
The unpackzip function in archiveunpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a 1 filename or 2 path...
7.5CVSS7.2AI score0.01971EPSS
SaveExploits1References7Affected Software1
20