Arbitrary Command Execution Affecting fastreader package, versions >= 0


Severity

Recommended
0.0
high
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
2.06% (89th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RUBY-FASTREADER-20085
  • published12 Mar 2013
  • disclosed12 Mar 2013
  • creditUnknown

Introduced: 12 Mar 2013

CVE-2013-2615  (opens in a new tab)
CWE-77  (opens in a new tab)

Overview

fastreader is a terminal-based feed reader. Affected versions of this gem are vulnerable to arbitrary command execution due to mishandling of specially crafted input passed via a URL that contains a ; character. This may allow a context-dependent attacker to potentially execute arbitrary commands.

CVSS Scores

version 3.1