Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22339
HistoryJan 23, 2020 - 2:32 a.m.

OS Command Injection

2020-01-2302:32:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

EPSS

0.005

Percentile

75.8%

bibtex-ruby is vulnerable to OS command injection. During opening and parsing of the .bib file at a given path, unescaped user data is passed to an unsafe built-in Kernel.open method through BibTeX.open, allowing the execution of arbitrary OS commands.

EPSS

0.005

Percentile

75.8%