Advisories for Gem/Flukso4r package

2013

Arbitrary Command Execution

The package flukso4r contains a flaw in /lib/flukso/R.rb that is due to the application failing to properly validate user-supplied input. This may allow a context-dependent attacker to execute arbitrary commands.