CVE-2013-1898
digineo thumbshooter: no CVSS score yet. EPSS 2.1% chance of exploitation in the next 30 days.
lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- digineo:thumbshooter
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-7fqj-cg79-f2pv | RubyGems | thumbshooter | <=0.1.5 | no fix published |