rubygems

Records37All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

rubygems records in CISA KEV

No rubygems vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Fastreader · all components

TI-2013-02302 CVE-2013-2615 · GHSA-w248-xr37-jx8m

LOW 37

lib/entry_controller.rb in the fastreader Gem 1.0.8 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02268 Published 2013-03-20 No fix listed CWE-94