The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) ima…
CVSS 3.0CRITICAL 10.0·Network·No auth·No interaction·EPSS 0.0353·Published 2016-01-08·Fixed in 0.0.5CWE-77