En bref
- CVE-2015-7541 est une vulnérabilité CRITIQUE (CVSS 10.0) touchant colorscore, colorscore (colorscore project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.5%, plus élevée que 89.3% des vulnérabilités.
- Correctif : mettre à jour vers 0.0.5 ou plus récent.
Description
The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.
NVD description
The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free