Wicked Gem for Ruby contains a flaw
Published: October 08, 2013
SECURITY IDENTIFIERS
- CVE: CVE-2013-4413 (NVD)
- GHSA: GHSA-rprj-g6xc-p5gq
- OSVDB: OSVDB-98270
GEM
SEVERITY
CVSS v2.0: 5.0 (Medium)
PATCHED VERSIONS
>= 1.0.1
DESCRIPTION
Wicked Gem for Ruby contains a flaw that is due to the program failing to properly sanitize input passed via the 'the_step' parameter upon submission to the render_redirect.rb script. This may allow a remote attacker to gain access to arbitrary files.