CVE-2014-0156

Published June 30th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command.

ManageIQ/awesome_spawn

AwesomeSpawn is a module that provides some useful features over Ruby's Kernel.spawn.

GitHub