CVE-2011-0739
mikel lindsaar mail: no CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days. Fixed in mail 2.2.15.
The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mikel_lindsaar:mail
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cpjc-p7fc-j9xh | RubyGems | <2.2.15 | 2.2.15 |