thoughtbot/cocaine · Security
Cocaine Gem OS Command Injection vulnerability
- GHSA ID
- GHSA-c43v-hrmg-56r4
- CVE ID
- CVE-2013-4457
- Severity
- medium
- Published
- Updated
Description
The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.
CWEs
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')