CVE-2010-0418: Chumby Classic

High severity, CVSS 10.0. EPSS: 2.9% chance of exploitation in the next 30 days.

The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request.

Affected products

• Chumby Chumby Classic: up to and including 1.7.1; version 0.9 only; version 1.1 only; version 1.2 only; version 1.4 only; version 1.5 only; …
• Chumby Chumby One: up to and including 1.0.3; version 1.0.2 only

Published 2010-03-10. Last modified 2026-06-16.