Shell Command Injection in BibTeX-ruby by BibTeX
CVE-2019-10780

9.8CRITICAL

Key Information:

Vendor: Bibtex-ruby Project
Status: Bibtex-ruby
Vendor: CVE Published:; 22 January 2020

🔔 Create Bibtex-ruby Project Vulnerability Alert

What is CVE-2019-10780?

BibTeX-ruby versions prior to 5.1.0 are susceptible to shell command injection due to inadequate sanitization of user input. This weakness occurs when unsanitized user input is passed directly to the Ruby Kernel.open method via BibTeX.open, allowing attackers to execute arbitrary commands on the server.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BibTeX-ruby All versions prior to version 5.1.0

References

https://snyk.io/vuln/SNYK-RUBY-BIBTEXRUBY-542602

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 22, 2020
Vulnerability Reserved
Apr 3, 2019

JSON

Bibtex-ruby Project

What is CVE-2019-10780?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.