Security Advisory

CVE-2020-8130

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-02-24 14:41:26
Last updated 2024-08-04 09:48:25
Assigner hackerone
State PUBLISHED

Description

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.