RCE in Kelly D. Redding Kelredd-Pruview

CVE-2013-1947

kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to (1) document.rb, (2) video.rb, or (3) video_image.rb.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.016 (73.4th percentile) — read the EPSS interpretation.