kcapifony Gem for Ruby /lib/ksymfony1.rb Metacharacter Handling Remote Command Execution
Published: June 30, 2014
SECURITY IDENTIFIERS
- OSVDB: OSVDB-108572
- Vendor Advisory: https://www.mend.io/vulnerability-database/WS-2014-0019
GEM
PATCHED VERSIONS
None available.
DESCRIPTION
kcapifony Gem for Ruby contains a flaw in /lib/ksymfony1.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands.