description: active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker could exploit this vulnerability to execute arbitrary code on the system.
problem types: Command Injection - Generic (CWE-77)
affected:
{
product: active-support ruby gem
vendor: HackerOne
versions:
status: affected, version: 5.2.0
}