Sha256: fe9d6f490a501b71287b426c421ae5bc3d39435aebb5cc9625e76f39f3a93d26

Contents?: true

Size: 467 Bytes

Versions: 6

Compression:

Stored size: 467 Bytes

Contents

---
gem: fog-dragonfly
osvdb: 97854
url: http://osvdb.org/show/osvdb/97854
title: Dragonfly Gem for Ruby on Windows Shell Escaping Weakness
date: 2011-09-01
description: |
  Dragonfly Gem for Ruby contains a flaw that is due to the program failing to
  properly escape a shell that contains injected characters. This may allow a
  context-dependent attacker to potentially execute arbitrary commands.

  This gem has been renamed. Please use "dragonfly" from now on.

Version data entries

6 entries across 6 versions & 2 rubygems

Version Path
bundler-audit-0.7.0.1 data/ruby-advisory-db/gems/fog-dragonfly/OSVDB-97854.yml
bundler-budit-0.6.2 data/ruby-advisory-db/gems/fog-dragonfly/OSVDB-97854.yml
bundler-budit-0.6.1 data/ruby-advisory-db/gems/fog-dragonfly/OSVDB-97854.yml
bundler-audit-0.6.1 data/ruby-advisory-db/gems/fog-dragonfly/OSVDB-97854.yml
bundler-audit-0.6.0 data/ruby-advisory-db/gems/fog-dragonfly/OSVDB-97854.yml
bundler-audit-0.5.0 data/ruby-advisory-db/gems/fog-dragonfly/OSVDB-97854.yml