Security Advisory
CVE-2013-2060
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a request to download a cart.