| Package | Affected versions | Patched versions |
|---|---|---|
< 2.2.15 | 2.2.15 | |
= 1.0.0= 1.1.0= 1.2.1= 1.2.5= 1.2.6= 1.2.7= 1.2.8= 1.2.9= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.4.0= 1.4.1= 1.4.2= 1.4.3= 1.5.0= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.6.0= 2.0.3= 2.0.5= 2.1.0= 2.1.1= 2.1.2= 2.1.3= 2.1.5= 2.1.5.1= 2.1.5.2= 2.1.5.3= 2.2.0= 2.2.1= 2.2.10= 2.2.11= 2.2.12= 2.2.13= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.5.1= 2.2.5.2= 2.2.6= 2.2.6.1= 2.2.7= 2.2.9= 2.2.9.1≤ 2.2.14 |
The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free