PT-2013-6266

CVE-2013-7086

·

Published

2013-12-19

·

Updated

2017-10-24

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Webbynode gem versions 1.0.5.3 and earlier
Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message. This is due to a problem in the message function in lib/webbynode/notify.rb.
Recommendations For Webbynode gem versions 1.0.5.3 and earlier, consider disabling the message function in lib/webbynode/notify.rb until a patch is available to prevent the execution of arbitrary commands via shell metacharacters in a growlnotify message.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2013-7086
GHSA-P65M-QR5X-RRQQ
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com