What is GHSA-p673-hjf2-pwfr?

GHSA-p673-hjf2-pwfr is a security advisory published by GitHub Security Advisories with High severity. Shell command injection in command_wrap

Which CVE IDs does GHSA-p673-hjf2-pwfr cover?

GHSA-p673-hjf2-pwfr covers the following CVE IDs: CVE-2013-1875. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-p673-hjf2-pwfr?

GHSA-p673-hjf2-pwfr affects 1 product, including: rubygems/command_wrap:\u003c= 0.6.2.

GHSA-p673-hjf2-pwfrHigh

Shell command injection in command_wrap

Vendor

GitHub Security Advisories

Published

October 24, 2017

Last Modified

November 6, 2023

🔗 CVE IDs covered (1)

CVE-2013-1875 →

📋 Description

command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

🎯 Affected products1

rubygems/command_wrap:<= 0.6.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2013-1875
https://github.com/advisories/GHSA-p673-hjf2-pwfr
http://packetstormsecurity.com/files/120847/Ruby-Gem-Command-Wrap-Command-Execution.html
http://seclists.org/fulldisclosure/2013/Mar/175
http://www.openwall.com/lists/oss-security/2013/03/19/9
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/command_wrap/CVE-2013-1875.yml