TI-2013-05375 CVE-2013-6421 · GHSA-229r-pqp6-8w6gThe unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows…Priority LOW 37The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01971 · Published 2013-12-12 · No fix listed CWE-94
