Advisory details:
gitlab / gem/thumbshooter/CVE-2013-1898
| Advisory ID | gitlab/gem/thumbshooter/CVE-2013-1898 |
| Aliases |
CVE-2013-1898
|
| Summary | Remote code execution Specially crafted URLs can result in remote code execution if the URL contains shell metacharacters. This is due to the fact that the url is passed directly to the shell in the code thumbshooter.rb create method. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| cvssv2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/thumbshooter/CVE-2013-1898.yml |
| Reference id | Reference type | URL |
|---|---|---|
| http://vapid.dhs.org/advisories/thumbshooter-ruby-gem-remoteexec.html | ||
| http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1898 |
No exploits are available.
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
There are no SSVC decisions available.