Описание
smalruby and smalruby-editor vulnerable to OS Command Injection
smalruby-editor prior to 0.4.1 and smalruby prior to 0.1.11 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2017-2096
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/smalruby/CVE-2017-2096.yml
- https://web.archive.org/web/20200227194312/http://www.securityfocus.com/bid/95775
- http://jvn.jp/en/jp/JVN50197114/index.html
- http://smalruby.jp/blog/2017/01/14/smalruby-editor-0-4-1-has-been-released-english.html
Пакеты
Наименование
smalruby-editor
rubygems
Затронутые версииВерсия исправления
< 0.4.1
0.4.1
Наименование
smalruby
rubygems
Затронутые версииВерсия исправления
< 0.1.11
0.1.11
Связанные уязвимости
CVSS3: 9.8
nvd
почти 9 лет назад
smalruby-editor v0.4.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.