CVE-2013-7086

Name of the Vulnerable Software and Affected Versions Webbynode gem versions 1.0.5.3 and earlier

Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message. This is due to a problem in the message function in lib/webbynode/notify.rb.

Recommendations For Webbynode gem versions 1.0.5.3 and earlier, consider disabling the message function in lib/webbynode/notify.rb until a patch is available to prevent the execution of arbitrary commands via shell metacharacters in a growlnotify message.