Security Advisory

CVE-2020-8130

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-24 14:41:26
Last updated 2024-08-04 09:48:25
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.