Spree contains a flaw related to the api/orders.json script in the search functions of the rd_searchlogic gem which may allow a remote attacker to execute arbitrary commands.

Upgrade to version 0.50.0 or higher, as it has been reported to fix this vulnerability. The vendor has also provided a workaround in the vendor advisory.

• Secunia Advisory ID: 44318
• Metasploit ID: 71900
• Related OSVDB ID: 73751
• Generic Exploit URL: http://dev.metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/spree_searchlogic_exec.rb
• Packet Storm: http://packetstormsecurity.org/files/view/100699/spree_searchlogic_exec.rb.txt
• Other Advisory URL: http://www.slideshare.net/hackitoergosum/hes2011-joernchen-ruby-on-rails-from-a-code-auditor-perspective
• Vendor Specific Advisory URL: http://www.spreecommerce.com/blog/2011/04/19/security-fixes
• Vendor Specific News/Changelog Entry: http://www.spreecommerce.com/blog/2011/04/19/security-fixes

• joernchen - Phenoelit

NVD does not currently have a CVSSv2 score assigned.