CVE-2013-6421

HIGH · CVSS 7.5 EPSS 1.97%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-12-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2013-6421

Severity

HIGH

CVSS

7.5

EPSS

1.97%

Original NVD Description

The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.