Moderate severity vulnerability that affects ldoce

2017-10-24T18:33:37
ID GHSA-G266-3CRH-H7GJ
Type github
Reporter GitHub Advisory Database
Modified 2019-07-03T21:02:00

Description

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.