Cocaine Gem OS Command Injection vulnerability (GHSA-c43v-hrmg-56r4)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-4457
Severity: MODERATE · CWE: CWE-78

The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.

Affected packages:
package: ecosystem: RubyGems
name: cocaine
ranges: type: ECOSYSTEM
events: introduced: 0.4.0
fixed: 0.5.3