Unrated
Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.
CVE-2020-13802
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2020-13802 rebar
References
- advisory github.com
- advisory vuln.be
- report packetstormsecurity.com