Code injection

2013-04-2523:55:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.6%

JSON

kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb.

CPENameOperatorVersion
kelredd-pruvieweq0.3.8

CPE	Name	Operator	Version
	kelredd-pruview	eq	0.3.8

References

www.openwall.com/lists/oss-security/2013/04/10/3

www.openwall.com/lists/oss-security/2013/04/12/2