RCE in Adam Zaninovich Sounder

CVE-2013-5647

lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.020 (78.5th percentile) — read the EPSS interpretation.