CVE-2015-5673

CVE-2015-5673 affects the ISUCON5 qualifier portal web application (eventapp). The issue is an OS command injection in eventapp/lib/gcloud.rb where improper use of popen allows remote attackers to execute arbitrary OS commands by crafting an HTTP request containing shell metacharacters for a gclo...