Sha256: d94df2d4968e5391a5c6323f90a0b60a541458d02461d70ff4005eb782ea13ac
Contents?: true
Size: 528 Bytes
Versions: 5
Compression:
Stored size: 528 Bytes
Contents
--- gem: karteek-docsplit cve: 2013-1933 osvdb: 92117 url: http://osvdb.org/show/osvdb/92117 title: Karteek Docsplit Gem for Ruby text_extractor.rb File Name Shell Metacharacter Injection Arbitrary Command Execution date: 2013-04-08 description: Karteek Docsplit Gem for Ruby contains a flaw that is due to the program failing to properly sanitize input passed to text_extractor.rb. With a specially crafted file name that contains shell metacharacters, a context-dependent attacker can execute arbitrary commands cvss_v2: 9.3
Version data entries
5 entries across 5 versions & 2 rubygems