CVE-2013-1911 in ldoce

Riassunto

di MITRE

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 19/02/2013
• Divulgazione: 02/04/2013
• Moderazione: accettato
• Voce: VDB-63932
• CPE: pronto
• CWE: CWE-20 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.3 (VulDB)
• EPSS: 0.01959
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-1911
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1911
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-1911/