Sounder Contains Arbitrary Command Execution Vulnerability · CVE-2013-5647 · GitHub Advisory Database · GitHub

Sounder Contains Arbitrary Command Execution Vulnerability

High severity GitHub Reviewed Published Oct 24, 2017 to the GitHub Advisory Database • Updated Nov 6, 2023

Package

sounder (RubyGems)

Affected versions

< 1.0.2

Patched versions

1.0.2

Description

lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.

References

Published by the National Vulnerability Database

Aug 29, 2013

Published to the GitHub Advisory Database Oct 24, 2017

Reviewed Jun 16, 2020

Last updated Nov 6, 2023