~ / search / GHSA-9x97-x2p9-hvpf

GHSA-9x97-x2p9-hvpf

Fileutils Command Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2013-2516

Packages

EcosystemPackageAffectedFixed in
RubyGems fileutils < 0.7.1 0.7.1

Details

As written in the advisory (Markdown source, shown as plain text).

Ruby Gem Fileutils prior to v0.7.1 contains a Command Injection vulnerability in user supplied url variable that is passed to the shell.

References

External links from the advisory. They lead to third-party sites.