rubygems

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

rubygems records in CISA KEV

No rubygems vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Command Wrap · all components

TI-2013-01656 CVE-2013-1875 · GHSA-p673-hjf2-pwfr

LOW 39

command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03633 Published 2013-03-20 No fix listed CWE-94