CVE-2013-1947
kelredd-pruview 0.3.8 - OS Command Injection via Filename Argument
Title source: llmDescription
kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb.
References (2)
Core 2
Core References
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/04/12/2
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/04/10/3
Scores
EPSS
0.0204
EPSS Percentile
84.1%
Details
CWE
CWE-78
Status
published
Products (2)
kelly_d._redding/kelredd-pruview
0.3.8
rubygems/kelredd-pruview
0RubyGems
Published
Apr 25, 2013
Tracked Since
Feb 18, 2026