CVE-2014-1834: Echor Project Echor

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password.

Affected products

• Echor Project Echor: version 0.1.6 only

Published 2018-02-02. Last modified 2026-06-17.