Security Advisory

CVE-2013-1911

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-04-03 00:00:00
Last updated 2024-08-06 15:20:36
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.