MiniMagick Gem for Ruby URI Handling Arbitrary Command Injection (GHSA-w754-gq8r-pf5f)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-2616
Severity: HIGH · CWE: CWE-94

`lib/mini_magick.rb` in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Affected packages:
package: ecosystem: RubyGems
name: mini_magick
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 3.6.0