lingq Gem for Ruby client.rb Metacharacter Handling Remote Command Execution
Published: June 30, 2014
SECURITY IDENTIFIERS
- OSVDB: OSVDB-108585
- Vendor Advisory: https://www.versioneye.com/Ruby/lingq/0.3.1
GEM
PATCHED VERSIONS
None available.
DESCRIPTION
lingq Gem for Ruby contains a flaw in client.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands.