CVE-2013-4479

Published December 7th, 2013

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.

sup-heliotrope/sup

A curses threads-with-tags style email client (mailing list: [email protected])

GitHub

964