Skip to content

CVE-2014-10075 karo Metacharacter Handling Remote Command Execution

CriticalCVSS 9.8 EPSS 3.5% PoC
Published
Updated
Exploit status
Proof-of-concept only
Sign in for asset impact Search another CVE

Description

The karo gem 2.3.8 for Ruby allows Remote command injection via the host field.

Affected products

ProductAffected versionsFixed in
rubygems karo(RubyGems) <= 2.5.2 No fix listed
rubygems karo(RubyGems) = 1.0.0 No fix listed
rubygems karo(RubyGems) = 1.1.0 No fix listed
rubygems karo(RubyGems) = 1.2.0 No fix listed
rubygems karo(RubyGems) = 1.2.1 No fix listed
rubygems karo(RubyGems) = 1.3.0 No fix listed
rubygems karo(RubyGems) = 1.4.0 No fix listed
rubygems karo(RubyGems) = 1.5.0 No fix listed
rubygems karo(RubyGems) = 2.0.0 No fix listed
rubygems karo(RubyGems) = 2.1.0 No fix listed
rubygems karo(RubyGems) = 2.1.1 No fix listed
rubygems karo(RubyGems) = 2.1.2 No fix listed
rubygems karo(RubyGems) = 2.1.3 No fix listed
rubygems karo(RubyGems) = 2.2.0 No fix listed
rubygems karo(RubyGems) = 2.2.1 No fix listed
rubygems karo(RubyGems) = 2.3.0 No fix listed
rubygems karo(RubyGems) = 2.3.1 No fix listed
rubygems karo(RubyGems) = 2.3.2 No fix listed
rubygems karo(RubyGems) = 2.3.3 No fix listed
rubygems karo(RubyGems) = 2.3.4 No fix listed
rubygems karo(RubyGems) = 2.3.5 No fix listed
rubygems karo(RubyGems) = 2.3.6 No fix listed
rubygems karo(RubyGems) = 2.3.7 No fix listed
rubygems karo(RubyGems) = 2.3.8 No fix listed
rubygems karo(RubyGems) = 2.3.9 No fix listed
Show 5 more
ProductAffected versionsFixed in
rubygems karo(RubyGems) = 2.4.0 No fix listed
rubygems karo(RubyGems) = 2.5.0 No fix listed
rubygems karo(RubyGems) = 2.5.1 No fix listed
rubygems karo(RubyGems) = 2.5.2 No fix listed
karo project karo = 2.3.8 No fix listed

References