Staging Environment: Content and features may be unstable or change without notice.
Progress 0 / 0

Advisory Summary

ruby_advisory_db/gems/sprout/CVE-2013-6421

sprout Gem for Ruby archive_unpacker.rb unpack_zip() Function Multiple Parameter Arbitrary Code Execution sprout Gem for Ruby contains a flaw in the unpack_zip() function in archive_unpacker.rb. The issue is due to the program failing to properly sanitize input passed via the 'zip_file', 'dir', 'zip_name', and 'output' parameters. This may allow a context-dependent attacker to execute arbitrary code.
Mitigation Type Mitigation Data Mitigation Note