PT-2025-54695 · Rubygems · Spree

Publicado 2025-08-13 · Atualizado 2025-08-13

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality. The application fails to properly sanitize input passed via the search[send][] parameter, which is dynamically invoked using Ruby’s send method. This allows attackers to execute arbitrary shell commands on the server without authentication.

Exploit

Correção

Prototype Pollution

Code Injection

Enumeração de Fraquezas

CWE-1321

CWE-94

Identificadores relacionados

GHSA-97VM-C39P-JR86

Produtos afetados

Spree

Referências · 9

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spree/CVE-2011-10019.yml · Exploit
• https://github.com/spree/spree · Nota
• https://osv.dev/vulnerability/GHSA-97vm-c39p-jr86 · Aviso do Fabricante
• https://exploit-db.com/exploits/17941 · Nota
• https://web.archive.org/web/20111009192436/http://spreecommerce.com/blog/2011/10/05/remote-command-product-group · Nota
• ❌ https://github.com/orgs/spree · Nota, Deleted
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/spree_search_exec.rb · Nota
• https://vulncheck.com/advisories/spreecommerce-search-parameter-rce · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-10019 · Nota de Segurança