Mail Gem Improper Input Validation vulnerability (GHSA-rp63-jfmw-532w)
Published: 2017-10-24T18:33:38Z
Aliases: CVE-2012-2140
Severity: HIGH · CWE: CWE-20

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

Affected packages:
package: ecosystem: RubyGems
name: mail
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 2.4.3