CVE-2015-7541
CriticalSummary
The initialize method in the Histogram class in the colorscore gem before version 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the image_path, colors, or depth variable.
Risk Assessment
Exploitation of this vulnerability could lead to remote code execution, posing a serious threat to the security of the application and the organization's data.
Recommendation
It is recommended to update the colorscore gem to version 0.0.5 or later to mitigate this vulnerability.
Original NVD description (English source)
The initialize method in the Histogram class in lib/colorscore/histogram.rb in the colorscore gem before 0.0.5 for Ruby allows context-dependent attackers to execute arbitrary code via shell metacharacters in the (1) image_path, (2) colors, or (3) depth variable.