Lucene search
PRIOn knowledge basePRION:CVE-2020-8130HistoryFeb 24, 2020 - 3:15 p.m.
Command injection
2020-02-2415:15:00
PRIOn knowledge base
www.prio-n.com
4
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 19.10 | |
| debian_linux | eq | 8.0 | |
| fedora | eq | 30 | |
| fedora | eq | 31 | |
| leap | eq | 15.1 | |
| rake | lt | 12.3.3 |
References
lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html
hackerone.com/reports/651518
lists.debian.org/debian-lts-announce/2020/02/msg00026.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/523CLQ62VRN3VVC52KMPTROCCKY4Z36B/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VXMX4ARNX2JLRJMSH4N3J3UBMUT5CI44/
usn.ubuntu.com/4295-1/
Related
fedora
fedora
[SECURITY] Fedora 31 Update: rubygem-rake-12.3.3-200.fc31
2020-04-27 04:47:55
[SECURITY] Fedora 30 Update: rubygem-rake-12.3.3-200.fc30
2020-04-27 03:06:55
veracode
veracode
OS Command Injection
2020-02-26 04:45:34
osv
osv
CVE-2020-8130
2020-02-24 15:15:11
OS Command Injection in Rake
2020-02-28 16:54:36
rake - security update
2020-02-26 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0121)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3212-1)
2022-09-09 00:00:00
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2020-2460)
2020-11-05 00:00:00
cve
cve
CVE-2020-8130
2020-02-24 15:15:11
nvd
nvd
CVE-2020-8130
2020-02-24 15:15:11
amazon
amazon
Medium: rubygem-rake
2020-06-23 06:05:00
Medium: rubygem24-rake
2020-06-23 06:06:00
hackerone
hackerone
Ruby: OS Command Injection via egrep in Rake::FileList
2019-07-20 04:16:53
cloudfoundry
cloudfoundry
USN-4295-1: Rake vulnerability | Cloud Foundry
2020-03-10 00:00:00
nessus
nessus
EulerOS 2.0 SP9 : ruby (EulerOS-SA-2022-1016)
2022-01-28 00:00:00
EulerOS Virtualization 3.0.6.6 : ruby (EulerOS-SA-2020-2460)
2020-11-06 00:00:00
Amazon Linux AMI : rubygem24-rake (ALAS-2020-1385)
2020-07-02 00:00:00
ubuntucve
ubuntucve
CVE-2020-8130
2020-02-24 00:00:00
debian
debian
[SECURITY] [DLA 2120-1] rake security update
2020-02-26 21:33:22
debiancve
debiancve
CVE-2020-8130
2020-02-24 15:15:11
ubuntu
ubuntu
Rake vulnerability
2020-03-03 00:00:00
github
github
OS Command Injection in Rake
2020-02-28 16:54:36
cvelist
cvelist
CVE-2020-8130
2020-02-24 14:41:26
mageia
mageia
Updated ruby-rake packages fix security vulnerability
2020-03-06 19:13:58
redhatcve
redhatcve
CVE-2020-8130
2020-03-23 17:31:40
suse
suse
Recommended update for ruby2.5 (important)
2020-03-28 00:00:00
redhat
redhat
(RHSA-2021:4702) Moderate: Satellite 6.10 Release
2021-11-16 13:58:57