RubyGems/wicked CVE-2013-4413: medium, EPSS 3.02%

Wicked gem contains Path traversal vulnerability

Action: Upgrade wicked to 1.0.1 or later.

bundle update wicked

Affected

Fixed versions

Sources

• osv: GHSA-rprj-g6xc-p5gq
• https://nvd.nist.gov/vuln/detail/CVE-2013-4413
• https://github.com/schneems/wicked/commit/fe31bb2533fffc9d098c69ebeb7afc3b80509f53
• https://exchange.xforce.ibmcloud.com/vulnerabilities/87783
• https://github.com/advisories/GHSA-rprj-g6xc-p5gq
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/wicked/CVE-2013-4413.yml
• https://github.com/schneems/wicked
• https://web.archive.org/web/20210508170740/http://www.securityfocus.com/bid/62891
• http://seclists.org/oss-sec/2013/q4/43

CVE-2013-4413 · published 2017-10-24T18:33:37Z · modified 2025-04-13T22:52:34.125486Z · JSON