CVE-2013-6421

CVE-2013-6421 describes a command injection vulnerability in the unpack_zip function of the sprout gem 0.7.246 for Ruby. Attackers can execute arbitrary commands by embedding shell metacharacters within filenames or paths of a malicious zip archive. This vulnerability has a CVSS score of 7.5, indicating high severity with network access, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.