CVE-2013-6421

The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell…

published December 12, 2013

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01971 · 80.3th percentile
Published
2013-12-12T18:00Z
EPSS history
Timeline
  • 12 DEC 18:00Z
    The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell…
    cvelistv5