CVE-2014-0156

State: Published
Severity: Not scored
Published: Jun 30, 2022
Updated: Aug 6, 2024
Reserved: Dec 3, 2013

Description

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Awesome spawn as arguments. If untrusted input was included in command arguments, attacker could use this flaw to execute arbitrary command.

Scores

The record has no CVSS score.

Weaknesses

CWE-78

Affected Products

Product	Versions
awesome_spawnn/a	>1.20, >= 1.30Affected

References

https://rubysec.com/advisories/CVE-2014-0156/
https://github.com/ManageIQ/awesome_spawn/commit/e524f85f1c6e292ef7d117d7818521307ac269ff

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.