Skip to content
OpenAdvisories

Package · RubyGems

karteek-docsplit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2013-1933

    Karteek Docsplit vulnerable to OS Command Injection

    The extract_from_ocr function in lib/docsplit/text_extractor.rb in the Karteek Docsplit (karteek-docsplit) gem 0.5.4 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a PDF filename.

    karteek-docsplit RubyGems