Shell command injection in command_wrap (GHSA-p673-hjf2-pwfr)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-1875
Severity: HIGH · CWE: CWE-94

command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename.

Affected packages:
package: ecosystem: RubyGems
name: command_wrap
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 0.6.2