VULNERABILITY INTELLIGENCE
CVE-2013-4457
CVSS score6.8 MEDIUM
EPSS probability2.00%
CISA KEVNot currently listed
Published2013-11-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-dependent attackers to execute arbitrary commands via a crafted has object, related to recursive variable interpolation.
Weakness classification
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')