Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby Gem Sprout ‘unpack_zip()’函数远程命令注入漏洞
Vulnerability Description
Ruby Gem Sprout是一套模块化的软件开发平台。该平台能够通过Ruby和RubyGems分享代码生成器、代码库、可执行文件和自动构建任务。 sprout gem for Ruby 0.7.246版本中的archive_unpacker.rb文件中的‘unpack_zip’函数中存在安全漏洞。攻击者可借助文件名或路径中的Shell元字符利用该漏洞执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A