← Back

Ldoce

ldoce

Vendor: Mark Burns • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-1911
1Mark Burns
1Ldoce
Apr 29, 2026
Apr 3, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.