CVE-2013-2090
uplawski creme fraiche: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days. Fixed in cremefraiche 0.6.1.
The set_meta_data function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information.
- EPSS
- 4.2% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- uplawski:creme_fraiche
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-m6f7-46hw-grcj | RubyGems | cremefraiche | <0.6.1 | 0.6.1 |