CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1656

Spree Commerce 1.0.x through 1.3.2 allows remote authenticated administrators to instantiate arbitrary Ruby objects and execute arbitrary commands via the (1) payment_method parameter to core/app/controllers/spree/admin/payment_methods_controller.rb; and the (2) promotion_action parameter to promotion_actions_controller.rb, (3) promotion_rule parameter to promotion_rules_controller.rb, and (4) calculator_type parameter to promotions_controller.rb in promo/app/controllers/spree/admin/, related to unsafe use of the constantize function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.3%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-1656

Spreecommerce » Spree » Version: 0.0.1

cpe:2.3:a:spreecommerce:spree:0.0.1
Spreecommerce » Spree » Version: 0.0.2

cpe:2.3:a:spreecommerce:spree:0.0.2
Spreecommerce » Spree » Version: 0.0.3

cpe:2.3:a:spreecommerce:spree:0.0.3
Spreecommerce » Spree » Version: 0.0.4

cpe:2.3:a:spreecommerce:spree:0.0.4
Spreecommerce » Spree » Version: 0.0.5

cpe:2.3:a:spreecommerce:spree:0.0.5
Spreecommerce » Spree » Version: 0.0.6

cpe:2.3:a:spreecommerce:spree:0.0.6
Spreecommerce » Spree » Version: 0.0.7

cpe:2.3:a:spreecommerce:spree:0.0.7
Spreecommerce » Spree » Version: 0.0.8

cpe:2.3:a:spreecommerce:spree:0.0.8
Spreecommerce » Spree » Version: 0.0.9

cpe:2.3:a:spreecommerce:spree:0.0.9
Spreecommerce » Spree » Version: 0.10.0

cpe:2.3:a:spreecommerce:spree:0.10.0
Spreecommerce » Spree » Version: 0.10.1

cpe:2.3:a:spreecommerce:spree:0.10.1
Spreecommerce » Spree » Version: 0.10.2

cpe:2.3:a:spreecommerce:spree:0.10.2
Spreecommerce » Spree » Version: 0.11.0

cpe:2.3:a:spreecommerce:spree:0.11.0
Spreecommerce » Spree » Version: 0.11.1

cpe:2.3:a:spreecommerce:spree:0.11.1
Spreecommerce » Spree » Version: 0.11.2

cpe:2.3:a:spreecommerce:spree:0.11.2
Spreecommerce » Spree » Version: 0.11.3

cpe:2.3:a:spreecommerce:spree:0.11.3
Spreecommerce » Spree » Version: 0.11.4

cpe:2.3:a:spreecommerce:spree:0.11.4
Spreecommerce » Spree » Version: 0.11.99

cpe:2.3:a:spreecommerce:spree:0.11.99
Spreecommerce » Spree » Version: 0.2.0

cpe:2.3:a:spreecommerce:spree:0.2.0
Spreecommerce » Spree » Version: 0.30.0

cpe:2.3:a:spreecommerce:spree:0.30.0
Spreecommerce » Spree » Version: 0.30.1

cpe:2.3:a:spreecommerce:spree:0.30.1
Spreecommerce » Spree » Version: 0.30.2

cpe:2.3:a:spreecommerce:spree:0.30.2
Spreecommerce » Spree » Version: 0.4.0

cpe:2.3:a:spreecommerce:spree:0.4.0
Spreecommerce » Spree » Version: 0.4.1

cpe:2.3:a:spreecommerce:spree:0.4.1
Spreecommerce » Spree » Version: 0.40.0

cpe:2.3:a:spreecommerce:spree:0.40.0
Spreecommerce » Spree » Version: 0.40.1

cpe:2.3:a:spreecommerce:spree:0.40.1
Spreecommerce » Spree » Version: 0.40.2

cpe:2.3:a:spreecommerce:spree:0.40.2
Spreecommerce » Spree » Version: 0.40.3

cpe:2.3:a:spreecommerce:spree:0.40.3
Spreecommerce » Spree » Version: 0.40.4

cpe:2.3:a:spreecommerce:spree:0.40.4
Spreecommerce » Spree » Version: 0.5.0

cpe:2.3:a:spreecommerce:spree:0.5.0
Spreecommerce » Spree » Version: 0.5.1

cpe:2.3:a:spreecommerce:spree:0.5.1
Spreecommerce » Spree » Version: 0.50.0

cpe:2.3:a:spreecommerce:spree:0.50.0
Spreecommerce » Spree » Version: 0.50.1

cpe:2.3:a:spreecommerce:spree:0.50.1
Spreecommerce » Spree » Version: 0.50.2

cpe:2.3:a:spreecommerce:spree:0.50.2
Spreecommerce » Spree » Version: 0.50.3

cpe:2.3:a:spreecommerce:spree:0.50.3
Spreecommerce » Spree » Version: 0.50.4

cpe:2.3:a:spreecommerce:spree:0.50.4
Spreecommerce » Spree » Version: 0.6.0

cpe:2.3:a:spreecommerce:spree:0.6.0
Spreecommerce » Spree » Version: 0.60.0

cpe:2.3:a:spreecommerce:spree:0.60.0
Spreecommerce » Spree » Version: 0.60.1

cpe:2.3:a:spreecommerce:spree:0.60.1
Spreecommerce » Spree » Version: 0.60.2

cpe:2.3:a:spreecommerce:spree:0.60.2
Spreecommerce » Spree » Version: 0.60.3

cpe:2.3:a:spreecommerce:spree:0.60.3
Spreecommerce » Spree » Version: 0.60.4

cpe:2.3:a:spreecommerce:spree:0.60.4
Spreecommerce » Spree » Version: 0.60.5

cpe:2.3:a:spreecommerce:spree:0.60.5
Spreecommerce » Spree » Version: 0.60.6

cpe:2.3:a:spreecommerce:spree:0.60.6
Spreecommerce » Spree » Version: 0.7.0

cpe:2.3:a:spreecommerce:spree:0.7.0
Spreecommerce » Spree » Version: 0.7.1

cpe:2.3:a:spreecommerce:spree:0.7.1
Spreecommerce » Spree » Version: 0.70.0

cpe:2.3:a:spreecommerce:spree:0.70.0
Spreecommerce » Spree » Version: 0.70.1

cpe:2.3:a:spreecommerce:spree:0.70.1
Spreecommerce » Spree » Version: 0.70.2

cpe:2.3:a:spreecommerce:spree:0.70.2
Spreecommerce » Spree » Version: 0.70.3

cpe:2.3:a:spreecommerce:spree:0.70.3
Spreecommerce » Spree » Version: 0.70.4

cpe:2.3:a:spreecommerce:spree:0.70.4
Spreecommerce » Spree » Version: 0.70.5

cpe:2.3:a:spreecommerce:spree:0.70.5
Spreecommerce » Spree » Version: 0.70.6

cpe:2.3:a:spreecommerce:spree:0.70.6
Spreecommerce » Spree » Version: 0.70.7

cpe:2.3:a:spreecommerce:spree:0.70.7
Spreecommerce » Spree » Version: 0.8.0

cpe:2.3:a:spreecommerce:spree:0.8.0
Spreecommerce » Spree » Version: 0.8.1

cpe:2.3:a:spreecommerce:spree:0.8.1
Spreecommerce » Spree » Version: 0.8.2

cpe:2.3:a:spreecommerce:spree:0.8.2
Spreecommerce » Spree » Version: 0.8.3

cpe:2.3:a:spreecommerce:spree:0.8.3
Spreecommerce » Spree » Version: 0.8.4

cpe:2.3:a:spreecommerce:spree:0.8.4
Spreecommerce » Spree » Version: 0.8.5

cpe:2.3:a:spreecommerce:spree:0.8.5
Spreecommerce » Spree » Version: 0.9.0

cpe:2.3:a:spreecommerce:spree:0.9.0
Spreecommerce » Spree » Version: 0.9.1

cpe:2.3:a:spreecommerce:spree:0.9.1
Spreecommerce » Spree » Version: 0.9.2

cpe:2.3:a:spreecommerce:spree:0.9.2
Spreecommerce » Spree » Version: 0.9.3

cpe:2.3:a:spreecommerce:spree:0.9.3
Spreecommerce » Spree » Version: 0.9.4

cpe:2.3:a:spreecommerce:spree:0.9.4
Spreecommerce » Spree » Version: 1.0

cpe:2.3:a:spreecommerce:spree:1.0
Spreecommerce » Spree » Version: 1.0.0

cpe:2.3:a:spreecommerce:spree:1.0.0
Spreecommerce » Spree » Version: 1.0.1

cpe:2.3:a:spreecommerce:spree:1.0.1
Spreecommerce » Spree » Version: 1.0.2

cpe:2.3:a:spreecommerce:spree:1.0.2
Spreecommerce » Spree » Version: 1.0.3

cpe:2.3:a:spreecommerce:spree:1.0.3
Spreecommerce » Spree » Version: 1.0.4

cpe:2.3:a:spreecommerce:spree:1.0.4
Spreecommerce » Spree » Version: 1.0.5

cpe:2.3:a:spreecommerce:spree:1.0.5
Spreecommerce » Spree » Version: 1.0.6

cpe:2.3:a:spreecommerce:spree:1.0.6
Spreecommerce » Spree » Version: 1.0.7

cpe:2.3:a:spreecommerce:spree:1.0.7
Spreecommerce » Spree » Version: 1.1.0

cpe:2.3:a:spreecommerce:spree:1.1.0
Spreecommerce » Spree » Version: 1.1.1

cpe:2.3:a:spreecommerce:spree:1.1.1
Spreecommerce » Spree » Version: 1.1.2

cpe:2.3:a:spreecommerce:spree:1.1.2
Spreecommerce » Spree » Version: 1.1.3

cpe:2.3:a:spreecommerce:spree:1.1.3
Spreecommerce » Spree » Version: 1.1.4

cpe:2.3:a:spreecommerce:spree:1.1.4
Spreecommerce » Spree » Version: 1.1.5

cpe:2.3:a:spreecommerce:spree:1.1.5
Spreecommerce » Spree » Version: 1.1.6

cpe:2.3:a:spreecommerce:spree:1.1.6
Spreecommerce » Spree » Version: 1.2.0

cpe:2.3:a:spreecommerce:spree:1.2.0
Spreecommerce » Spree » Version: 1.2.1

cpe:2.3:a:spreecommerce:spree:1.2.1
Spreecommerce » Spree » Version: 1.2.2

cpe:2.3:a:spreecommerce:spree:1.2.2
Spreecommerce » Spree » Version: 1.2.3

cpe:2.3:a:spreecommerce:spree:1.2.3
Spreecommerce » Spree » Version: 1.2.4

cpe:2.3:a:spreecommerce:spree:1.2.4
Spreecommerce » Spree » Version: 1.2.5

cpe:2.3:a:spreecommerce:spree:1.2.5
Spreecommerce » Spree » Version: 1.3.0

cpe:2.3:a:spreecommerce:spree:1.3.0
Spreecommerce » Spree » Version: 1.3.1

cpe:2.3:a:spreecommerce:spree:1.3.1
Spreecommerce » Spree » Version: 1.3.2

cpe:2.3:a:spreecommerce:spree:1.3.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1656

Products

Pricing

Contact Us