CVE-2013-1948

Name of the Vulnerable Software and Affected Versions md2pdf gem version 0.0.1

Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. This is possible due to a flaw in the converter.rb file within the md2pdf gem for Ruby.

Recommendations For md2pdf gem version 0.0.1, consider restricting the use of the converter.rb file until a patch is available, and avoid using filenames that contain shell metacharacters to minimize the risk of exploitation.