Thumbshooter vulnerable to Code Injection (GHSA-7fqj-cg79-f2pv)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-1898
Severity: HIGH · CWE: CWE-94

lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Affected packages:
package: ecosystem: RubyGems
name: thumbshooter
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 0.1.5