Contents

---
gem: Arabic-Prawn
cve: 2014-2322
osvdb: 104365
url: https://nvd.nist.gov/vuln/detail/CVE-2014-2322
title: Arabic Prawn Gem for Ruby lib/string_utf_support.rb User Input Handling Remote Command Injection
date: 2014-03-10
description: |
  Arabic Prawn Gem for Ruby contains a flaw in the lib/string_utf_support.rb
  file. The issue is due to the program failing to sanitize user input. This may
  allow a remote attacker to inject arbitrary commands.
cvss_v2: 7.5

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/Arabic-Prawn/CVE-2014-2322.yml