CVE-2013-6421 in sprout
Resumen (Inglés)
The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.
Reservar
2013-11-04
Divulgación
2013-12-12
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 65738 | sprout unpack_zip escalada de privilegios | 94 | No está definido | No está definido | CVE-2013-6421 |