CVE-2014-2888
herry sfpagent: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days. Fixed in sfpagent 0.4.15.
lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request.
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- herry:sfpagent
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vm28-mrm7-fpjq | RubyGems | sfpagent | <0.4.15 | 0.4.15 |