CVEvulnerability

CVE-2020-8130

6.4 MEDIUM Published 2020-02-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

Affected configurations

• ruby-lang rake (< 12.3.3) • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.10 • debian debian linux 8.0 • fedoraproject fedora 30 • fedoraproject fedora 31 • opensuse leap 15.1

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References