Skip to content
OpenAdvisories

Package · RubyGems

ldoce

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    CVE-2013-1911

    ldoce Gem Arbitrary Command Execution

    lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.

    ldoce RubyGems