ruby-advisory-db/gems/spree/CVE-2011-10019.yml at master · rubysec/ruby-advisory-db · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
---
gem: spree
cve: 2011-10019
osvdb: 76011
ghsa: 97vm-c39p-jr86
url: https://nvd.nist.gov/vuln/detail/CVE-2011-10019
title: Remote Command Execution in Spree search functionality
date: 2011-10-05
description: |
  Spree versions prior to 0.60.2 contain a remote command execution
  vulnerability in the search functionality. The application fails to
  properly sanitize input passed via the `search[:send][]` parameter,
  which is dynamically invoked using Ruby’s `send` method. This allows
  attackers to execute arbitrary shell commands on the server without
  authentication.
cvss_v2: 9.0
cvss_v3: 9.8
cvss_v4: 10.0
patched_versions:
  - ">= 0.60.2"
related:
  url:
    - https://nvd.nist.gov/vuln/detail/CVE-2011-10019
    - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/spree_search_exec.rb
    - https://web.archive.org/web/20111009192436/http://spreecommerce.com/blog/2011/10/05/remote-command-product-group
    - https://www.exploit-db.com/exploits/17941
    - https://www.vulncheck.com/advisories/spreecommerce-search-parameter-rce
    - https://github.com/orgs/spree/spree
    - https://github.com/advisories/GHSA-97vm-c39p-jr86