What is GHSA-78j3-7wpm-qhvp?

GHSA-78j3-7wpm-qhvp is a security advisory published by GitHub Security Advisories with Critical severity. Shell Metacharacter Injection in kelredd-pruview

Which CVE IDs does GHSA-78j3-7wpm-qhvp cover?

GHSA-78j3-7wpm-qhvp covers the following CVE IDs: CVE-2013-1947. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-78j3-7wpm-qhvp?

GHSA-78j3-7wpm-qhvp affects 1 product, including: rubygems/kelredd-pruview:\u003c= 0.5.0.

GHSA-78j3-7wpm-qhvpCritical

Shell Metacharacter Injection in kelredd-pruview

Vendor

GitHub Security Advisories

Published

October 24, 2017

Last Modified

July 5, 2023

🔗 CVE IDs covered (1)

CVE-2013-1947 →

📋 Description

kelredd-pruview gem 0.3.8 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to document.rb, video.rb, or video_image.rb.

🎯 Affected products1

rubygems/kelredd-pruview:<= 0.5.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2013-1947
https://github.com/advisories/GHSA-78j3-7wpm-qhvp
http://www.openwall.com/lists/oss-security/2013/04/10/3
http://www.openwall.com/lists/oss-security/2013/04/12/2
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kelredd-pruview/CVE-2013-1947.yml
http://vapid.dhs.org/advisories/kelredd-pruview-cmd-inject.html