Staging Environment: Content and features may be unstable or change without notice.
Progress 0 / 0

Advisory Summary

gitlab/gem/kompanee-recipes/OSVDB-108593

Command injection vulnerability The file /lib/kompanee-recipes/heroku.rb does not properly escape user controlled input for the 'password', 'user', 'deploy_name', and 'application' variables. A remote attacker, by passing shell metacharacters, may be able to execute arbitrary commands.
Mitigation Type Mitigation Data Mitigation Note