{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.5"}],"component":"thumbshooter","cve_ids":["CVE-2013-1898"],"ecosystem":"RubyGems","epss":0.02128,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7fqj-cg79-f2pv","id":"tcs_01M5KEHQ0TN8VJHTFE8Z9H01GC","modified_at":"2024-12-03T06:10:59.045899Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-7fqj-cg79-f2pv","https://nvd.nist.gov/vuln/detail/CVE-2013-1898","https://github.com/digineo/thumbshooter","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/thumbshooter/CVE-2013-1898.yml","http://seclists.org/fulldisclosure/2013/Mar/218","http://vapid.dhs.org/advisories/thumbshooter-ruby-gem-remoteexec.html","http://www.openwall.com/lists/oss-security/2013/03/26/13","http://www.openwall.com/lists/oss-security/2013/03/26/3"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-7fqj-cg79-f2pv","url":"https://osv.dev/vulnerability/GHSA-7fqj-cg79-f2pv"}],"summary":"Thumbshooter vulnerable to Code Injection"}