The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an…
CVSS 2.0MEDIUM 6.8·Network·No auth·Interaction —·EPSS 0.02706·Published 2011-02-02·Fixed in 2.2.15CWE-20