VIR Vulnerability Intelligence Relay

CVE-2013-4457

medium
Published 2013-10-22 · Modified 2024-12-03
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8

Description

Cocaine Gem OS Command Injection vulnerability

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/55365

Package impact
EcosystemPackageVulnerableFixed
ruby RubyGemscocaine!< 0.4.0||<>= 0.5.3>= 0.5.3
ruby RubyGemscocaine>=0.4.0,<0.5.30.5.3

Application impact
VendorProductVersionsFixed
thoughtbotcocaine0.4.0
thoughtbotcocaine0.4.1
thoughtbotcocaine0.4.2
thoughtbotcocaine0.5.0
thoughtbotcocaine0.5.1
thoughtbotcocaine0.5.2

References

CWEs

CWE-78

Verify integrity in audit chain (admin only). AS-IS.