Vulnerability in Rob Westgeest Md2pdf
CVE-2013-1948
converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.
EPSS: 0.022 (80.3th percentile) — read the EPSS interpretation.
Affected products
- Rob_westgeest Md2pdf — versions 0.0.1
- Ruby-lang Ruby
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_MISC)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (vdb-entry, x_refsource_BID)