CVE-2013-2060

CVE-2013-2060 is a critical command injection vulnerability affecting Red Hat OpenShift, specifically within the download_from_url function. Remote attackers can exploit this by injecting shell metacharacters into the URL when requesting to download a cart, leading to arbitrary command execution. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.