Lucene search
+L
RubygemsMini Magick

1 matches found

CVE
CVE
added 2013/03/20 10:00 p.m.72 views

CVE-2013-2616

The CVE-2013-2616 entry affects the MiniMagick Ruby gem, specifically lib/mini_magick.rb in version 1.3.1. The vulnerability arises when handling a URL containing shell metacharacters, enabling a context-dependent attacker to execute arbitrary commands, i.e., an arbitrary command injection via cr...

7.5CVSS7.8AI score0.03633EPSS
Save