fastreader Gem for Ruby URI Handling Arbitrary Command Injection (GHSA-w248-xr37-jx8m)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-2615
Severity: HIGH · CWE: CWE-94

fastreader Gem for Ruby contains a flaw that is triggered during the handling of specially crafted input passed via a URL that contains a ';' character. This may allow a context-dependent attacker to potentially execute arbitrary commands.

Affected packages:
package: ecosystem: RubyGems
name: fastreader
ranges: type: ECOSYSTEM
events: 1.0.0