CVE-2013-2095

rubygem-openshift-origin-controller: API can be used to create applications via cartridge_cache.rb URI.prase() to perform command injection

Score

CVSS 3.1 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2019-12-10

Last modified

2024-08-06

Weaknesses

CWE-74

Affected products

• Openshift-origin-controller (Openshift-origin-controller Project)
• Rubygem-openshift-origin-controller (Rubygem-openshift-origin-controller)

References

• https://access.redhat.com/security/cve/cve-2013-2095
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2095