ADVISORIES
- OSVDB-101577
- Vendor Advisory
GEM
PATCHED VERSIONS
None.
DESCRIPTION
flukso4r Gem for Ruby contains a flaw in /lib/flukso/R.rb that is due to the application failing to properly validate user-supplied input. This may allow a context-dependent attacker to execute arbitrary commands.