RubyGems/fastreader CVE-2013-2615: high, EPSS 2.27%
fastreader Gem for Ruby URI Handling Arbitrary Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w248-xr37-jx8m
- https://nvd.nist.gov/vuln/detail/CVE-2013-2615
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/fastreader/CVE-2013-2615.yml
- http://packetstormsecurity.com/files/120776/Ruby-Gem-Fastreader-1.0.8-Command-Execution.html
- http://packetstormsecurity.com/files/120845/Ruby-Gem-Fastreader-1.0.8-Code-Execution.html
- http://seclists.org/fulldisclosure/2013/Mar/122
- http://www.openwall.com/lists/oss-security/2013/03/19/9
CVE-2013-2615 · published · modified · JSON