CVE-2013-2617.yml

---
gem: curl
cve: 2013-2617
osvdb: 91230
ghsa: hxx6-p24v-wg8c
url: https://nvd.nist.gov/vuln/detail/CVE-2013-2617
title: "CVE-2013-2617 rubygem-curl: insufficient URL escaping command injection"
date: 2013-03-12
description: |
  lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute
  arbitrary commands via shell metacharacters in a URL.
cvss_v2: 7.5