Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1898
cve
2013
1898
ruby
gem
thumbshooter
remote
command execution
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.015 Low
EPSS
Percentile
87.2%
lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
Affected configurations
Node
digineothumbshooterMatch0.1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| digineo:thumbshooter | digineo thumbshooter | eq | 0.1.5 |
Related
osv
osv
Thumbshooter vulnerable to Code Injection
2017-10-24 18:33:37
prion
prion
Code injection
2013-04-09 20:55:00
github
github
Thumbshooter vulnerable to Code Injection
2017-10-24 18:33:37
nvd
nvd
CVE-2013-1898
2013-04-09 20:55:02
cvelist
cvelist
CVE-2013-1898
2022-10-03 16:14:46
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
Low
0.015 Low
EPSS
Percentile
87.2%
Related for CVE-2013-1898