CVE-2013-7086
Webbynode Code Injection vulnerability
The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.
Exploit likelihood
What each source reports
NVD Score used
The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.
- Record
CVE-2013-7086- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.
- Record
CVE-2013-7086- Updated
- 2026-11-02
EUVDEUVD-2017-0278 No score
The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.
- Record
EUVD-2017-0278- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p65m-qr5x-rrqq No score
Webbynode Code Injection vulnerability
The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.
- Record
GHSA-p65m-qr5x-rrqq- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVGHSA-p65m-qr5x-rrqq No score
Webbynode Code Injection vulnerability
The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.
- Record
GHSA-p65m-qr5x-rrqq- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webbynodeRubyGems |
through 1.0.5.3 | None known |
webbynodeRubyGems |
through 1.0.5.3, plus listed versions 0.1.00.1.10.1.20.2.00.2.1 Show 28 moreShow less0.2.20.2.30.2.40.2.4.10.2.5.beta10.2.5.beta21.0.01.0.11.0.21.0.31.0.3.beta1.0.3.beta11.0.3.beta41.0.41.0.4.21.0.4.31.0.4.beta31.0.4.beta41.0.51.0.5.11.0.5.21.0.5.beta101.0.5.beta21.0.5.beta31.0.5.beta41.0.5.beta51.0.5.beta61.0.5.beta7 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7086 is a high vulnerability (CVSS 7.5) in Webbynode, published December 19, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.53%, the 89th percentile. No source names a fixed version.
References
vapid.dhs.org/advisories/webbynode-command-inj.html
seclists.org/oss-sec/2013/q4/493
github.com/webbynode/webbynode/pull/85
packetstormsecurity.com/files/124421
exchange.xforce.ibmcloud.com/vulnerabilities/89705
archives.neohapsis.com/archives/bugtraq/2013-12/0079.html
Show 9 moreShow less
osvdb.org/100920
securityfocus.com/bid/64289
nvd.nist.gov/vuln/detail/CVE-2013-7086
web.archive.org/web/20200229074410/http://www.securityfocus.com/bid/64289