Projectsprouts: >> Sprout Security Vulnerabilities
The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.
CVSS Score
7.5
EPSS Score
0.012
Published
2013-12-12