CVEs-PoC/2020/CVE-2020-8130.md

CVE-2020-8130

Description

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |.

POC

Reference

• https://hackerone.com/reports/651518

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ikedaisuke/rushcheck
• https://github.com/m-mizutani/octovy
• https://github.com/m-mizutani/triview
• https://github.com/wxianfeng/hanzi_to_pinyin