CVE-2023-28102

CVE-2023-28102 is a critical command injection vulnerability affecting the discordrb Ruby library before commit 91e13043ffa. It arises from unsafe shell string construction in the encoder.rb file, potentially allowing arbitrary command execution on the host system if user-controlled input reaches the vulnerable method. With a CVSS score of 9.6 (CRITICAL), this vulnerability has a network attack vector and low attack complexity, but requires user interaction. A successful exploit could lead to high impact on confidentiality, integrity, and availability, depending on the permissions of the running process. There is currently no evidence of active exploitation, nor are there publicly available exploits in Metasploit or ExploitDB. Community discussion and media coverage are minimal, indicating low public awareness.