CVE-2013-1947

Name of the Vulnerable Software and Affected Versions kelredd-pruview gem version 0.3.8

Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename argument to files such as document.rb, video.rb, or video image.rb.

Recommendations For kelredd-pruview gem version 0.3.8, consider restricting the use of the filename argument in the affected files until a patch is available. As a temporary workaround, validate and sanitize filename inputs to prevent the injection of shell metacharacters.