The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.03587·Published 2021-01-26·Fixed in 0.2.2CWE-78