Unrated severityNVD Advisory· Published Nov 4, 2015· Updated Jun 17, 2026

CVE-2015-5673

Description

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Isucon/Isucon 5 Qualifier Eventapp
cpe:2.3:a:isucon:isucon_5_qualifier_eventapp:-:*:*:*:*:*:*:*
Isucon/eventappllm-create
Range: <2015-10-30

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN04281281/index.htmlnvdVendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2015-000175nvdVendor Advisory
github.com/isucon/isucon5-qualify/commit/150e3e6d851acb31a0b15ce93380a7dab14203fanvd
github.com/isucon/isucon5-qualify/pull/5nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000