Skip to content
Sign in
Not rated

CVE-2020-8130 There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that…

Description

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

Affected products and versions

Product Affected versions Fixed in
https://github.com/ruby/ruby Versions not published
Track this CVE