Описание
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 12.3.1-1ubuntu0.1 |
| devel | not-affected | 13.0.1-2 |
| eoan | released | 12.3.1-3ubuntu0.1 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra-legacy/xenial | released | 10.5.0-2ubuntu0.1 |
| esm-infra/bionic | released | 12.3.1-1ubuntu0.1 |
| esm-infra/xenial | released | 10.5.0-2ubuntu0.1 |
| precise/esm | DNE | |
| trusty | ignored | end of standard support |
| trusty/esm | DNE |
Показывать по
6.9 Medium
CVSS2
6.4 Medium
CVSS3
Связанные уязвимости
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 i ...
6.9 Medium
CVSS2
6.4 Medium
CVSS3