Contents

---
gem: gitlab-grit
cve: 2013-4489
osvdb: 99370
url: https://nvd.nist.gov/vuln/detail/CVE-2013-4489
title: GitLab Grit Gem for Ruby contains a flaw
date: 2013-11-04
description: GitLab Grit Gem for Ruby contains a flaw in the app/contexts/search_context.rb script.
  The issue is triggered when input passed via the code search box is not properly sanitized,
  which allows strings to be evaluated by the Bourne shell. This may allow a remote attacker to
  execute arbitrary commands.
cvss_v2:
patched_versions: 
  - '>= 2.6.1'

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/gitlab-grit/CVE-2013-4489.yml