What is GHSA-qv32-5wm2-p32h?

GHSA-qv32-5wm2-p32h is a security advisory published by GitHub Security Advisories with Critical severity. Command Injection in sequenceserver

Which CVE IDs does GHSA-qv32-5wm2-p32h cover?

GHSA-qv32-5wm2-p32h covers the following CVE IDs: CVE-2024-42360. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qv32-5wm2-p32h?

GHSA-qv32-5wm2-p32h has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-qv32-5wm2-p32h?

GHSA-qv32-5wm2-p32h affects 1 product, including: rubygems/sequenceserver:\u003c 3.1.2.

GHSA-qv32-5wm2-p32hCriticalCVSS 9.8

Command Injection in sequenceserver

Vendor

GitHub Security Advisories

Published

August 13, 2024

Last Modified

August 14, 2024

🔗 CVE IDs covered (1)

CVE-2024-42360 →

📋 Description

Impact

Several HTTP endpoints did not properly sanitize user input and/or query parameters. This could be exploited to inject and run unwanted shell commands

Patches

Fixed in 3.1.2

Workarounds

No known workarounds

🎯 Affected products1

rubygems/sequenceserver:< 3.1.2

🔗 References (5)

https://github.com/wurmlab/sequenceserver/security/advisories/GHSA-qv32-5wm2-p32h
https://github.com/wurmlab/sequenceserver/commit/457e52709f7f9ed2fceed59b3db564cb50785dba
https://nvd.nist.gov/vuln/detail/CVE-2024-42360
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sequenceserver/CVE-2024-42360.yml
https://github.com/advisories/GHSA-qv32-5wm2-p32h